CVE-2016-1474
MEDIUMCisco Prime Infrastructure 2.2(2) - XSS
Title source: llmDescription
Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuw65846, a different vulnerability than CVE-2015-6434.
Scores
CVSS v3
4.3
EPSS
0.0024
EPSS Percentile
46.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Classification
CWE
CWE-284
Status
draft
Affected Products (1)
cisco/prime_infrastructure
Timeline
Published
Aug 08, 2016
Tracked Since
Feb 18, 2026