Vulnerability Bulletins |
Cisco Fog Director Cross-Site Scripting Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the Cisco Fog Director web framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software.The vulnerability is due to insufficient input validation for some of the parameters that are passed to the web server. An attacker could exploit this vulnerability by persuading a user to follow a malicious link or by intercepting and injecting malicious code into a user request. A More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160201-fd?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Fog%20Director%20Cross-Site%20Scripting%20Vulnerability&vs_k=1 |
|