CVE-2011-3294

Cisco TelePresence Video Communication Servers < X7.0 - Cross-Site Scripting via User-Agent HTTP Header

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/50084

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/70563

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1026186

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html

Scores

EPSS 0.0169

EPSS Percentile 74.7%

Details

CWE

CWE-79

Status published

Products (4)

cisco/telepresence_video_communication_servers

cisco/telepresence_video_communication_servers_software x5.2

cisco/telepresence_video_communication_servers_software x6.0

cisco/telepresence_video_communication_servers_software < x6.1

Published Oct 19, 2011

Tracked Since Feb 18, 2026