CVE-2011-0959 in Unified Operations Manager

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 02/10/2011
• Disclosure: 05/20/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-57475
• CPE: ready
• CWE: CWE-79 (Confirmed)
• Exploit: Download
• CVSS: 4.3
• EPSS: 0.37692
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0959
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0959
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0959/