CVE-2015-0594
Cisco Prime LAN Management Solution and Security Manager - Cross-Site Scripting in Help Pages
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and CSCun18263.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031813
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031814
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72793
Scores
EPSS
0.0179
EPSS Percentile
76.1%
Details
CWE
CWE-79
Status
published
Products (2)
cisco/prime_lan_management_solution
cisco/security_manager
Published
Feb 27, 2015
Tracked Since
Feb 18, 2026