Boletines de Vulnerabilidades

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability

   
Software afectado Cisco
 
A vulnerability in the Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to execute a cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to access a malicious link. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site.Cisco has not released software updates

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160328-ucdm?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Unified%20Communications%20Domain%20Manager%20Cross-Site%20Scripting%