CVE-2015-0655

Cisco Unified Web and E-Mail Interaction Manager - Cross-Site Scripting via POST Request

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0655

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031820

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/72824

Scores

EPSS 0.0177

EPSS Percentile 75.8%

Details

CWE

CWE-79

Status published

Products (1)

cisco/unified_web_and_e-mail_interaction_manager

Published Feb 28, 2015

Tracked Since Feb 18, 2026