CVE-2016-1462
MEDIUMCisco Prime Service Catalog 11.0 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.
Scores
CVSS v3
6.1
EPSS
0.0045
EPSS Percentile
63.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
cisco/prime_service_catalog
Timeline
Published
Jul 28, 2016
Tracked Since
Feb 18, 2026