CVE-2014-3365
Cisco Prime Security Manager < 9.2.1-2 - Cross-Site Scripting via Dashboard or Configure Realm Page
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via crafted input to the (1) Dashboard or (2) Configure Realm page, aka Bug ID CSCuo94808.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=37418
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3365
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100756
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031716
Scores
EPSS
0.0179
EPSS Percentile
76.1%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/prime_security_manager
< 9.2.1-2
Published
Feb 12, 2015
Tracked Since
Feb 18, 2026