CVE-2015-0703

Cisco Unified MeetingPlace 8.6(1.9) - Cross-Site Scripting in Administrative Web Interface

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032164
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38459

Scores

EPSS 0.0111
EPSS Percentile 62.5%

Details

CWE
CWE-79
Status published
Products (1)
cisco/unified_meetingplace 8.6\(1.9\)
Published Apr 21, 2015
Tracked Since Feb 18, 2026