Vulnerability Bulletins |
Cisco Meeting Server Persistent Cross-Site Scripting Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the HTTP web-based management interface of Cisco Meeting Server Software, formerly Acano Conferencing Server, could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the web interface of an affected system.The vulnerability is due to improper input validation of certain parameters that are passed to an affected device via an HTTP request. An attacker could exploit this vulnerability by persuading a user to More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ms?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Meeting%20Server%20Persistent%20Cross-Site%20Scripting%20Vulnerability& |
|