Boletines de Vulnerabilidades

Cisco SocialMiner WeChat Page Cross-Site Scripting Vulnerability
Información sobre el sistema

Software afectado	Cisco
Descripción
A vulnerability in the WeChat page of Cisco Social Miner could allow an unauthenticated, remote attacker to send a malicious script to an unsuspecting user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by convincing the user of the affected device to follow a malicious link or visit an attacker-controlled website. An exploit could allow the attacker to submit arbitrary requests to the affected device via the affected web browser with More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151103-csm?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20SocialMiner%20WeChat%20Page%20Cross-Site%20Scripting%20Vulnerability&v
Identificadores estándar
Propiedad	Valor
CVE	CVE-2015-6356.