CVE-2015-4272

Cisco Unified Communications Manager 10.5(2.10000.5) - Cross-Site Scripting via ccmivr Page Parameter

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39905
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032888

Scores

EPSS 0.0155
EPSS Percentile 72.4%

Details

CWE
CWE-79
Status published
Products (1)
cisco/unified_communications_manager 10.5\(2.10000.5\)
Published Jul 14, 2015
Tracked Since Feb 18, 2026