CVE-2015-0762

Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) - Cross-Site Scripting via URL Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032470
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39161

Scores

EPSS 0.0156
EPSS Percentile 72.6%

Details

CWE
CWE-79
Status published
Products (2)
cisco/unified_meetingplace 8.6\(1.2\)
cisco/unified_meetingplace 8.6\(1.9\)
Published Jun 04, 2015
Tracked Since Feb 18, 2026