CVE-2016-9200

MEDIUM

Cisco Prime Collaboration Assurance - XSS

Title source: llm

Description

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1) 10.6.

References (3)

Scores

CVSS v3 6.1
EPSS 0.0031
EPSS Percentile 53.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (3)

cisco/prime_collaboration_assurance
cisco/prime_collaboration_assurance
n/a/Cisco Prime Collaboration Assurance < Cisco Prime Collaboration Assurance

Timeline

Published Dec 14, 2016
Tracked Since Feb 18, 2026