CVE-2014-0735

Cisco Unified Communications Manager < 10.0(1) - Cross-Site Scripting via IPMA Interface

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0735

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32912

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65641

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029793

Scores

EPSS 0.0179

EPSS Percentile 76.1%

Details

CWE

CWE-79

Status published

Products (18)

cisco/unified_communications_manager 3.3\(5\)

cisco/unified_communications_manager 3.3\(5\)sr1

cisco/unified_communications_manager 3.3\(5\)sr2a

cisco/unified_communications_manager 4.1\(3\)

cisco/unified_communications_manager 4.1\(3\)sr1

cisco/unified_communications_manager 4.1\(3\)sr2

cisco/unified_communications_manager 4.1\(3\)sr3

cisco/unified_communications_manager 4.1\(3\)sr4

cisco/unified_communications_manager 4.2

cisco/unified_communications_manager 4.2.1

... and 8 more

Published Feb 20, 2014

Tracked Since Feb 18, 2026