Vulnerability Bulletins |
Cisco Network Analysis Module Cross-Site Scripting Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the login page of the Cisco Network Analysis Module (NAM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by convincing the NAM user to visit a malicious website.Cisco has confirmed the vulnerability in a security notice and released software updates.To exploit the vulnerability, the attacker may provide a link that directs a More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150303-CVE-2015-0656?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Network%20Analysis%20Module%20Cross-Site%20Scripting%20Vulne |
|