CVE-2011-0962

Cisco Unified Operations Manager < 8.5 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug ID CSCto12712.

Exploits (2)

exploitdb WRITEUP VERIFIED

by Sense of Security · textremotewindows

https://www.exploit-db.com/exploits/17304

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by Sense of Security · textremotehardware

https://www.exploit-db.com/exploits/35780

View Code ZIP pw:eip

References (5)

[Exploit] http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

[Various Sources] http://tools.cisco.com/security/center/viewAlert.x?alertId=23087

[Exploit] http://www.exploit-db.com/exploits/17304

[Exploit, URL Repurposed] http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/67524

Scores

EPSS 0.0551

EPSS Percentile 90.1%

Classification

CWE

CWE-79

Status published

Affected Products (11)

cisco/unified_operations_manager < 8.5

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

cisco/unified_operations_manager

n/a/n/a

Timeline

Published May 20, 2011

Tracked Since Feb 18, 2026