CVE-2015-0714

Cisco Finesse 10.0(1) 10.5(1) 10.6(1) 11.0(1) - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38607
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032222

Scores

EPSS 0.0136
EPSS Percentile 68.8%

Details

CWE
CWE-79
Status published
Products (4)
cisco/finesse 10.0\(1\)_base
cisco/finesse 10.5\(1\)_base
cisco/finesse 10.6\(1\)_base
cisco/finesse 11.0\(1\)_base
Published May 02, 2015
Tracked Since Feb 18, 2026