CVE-2014-3364 in Prime Security Manager
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Prime Security Manager (aka PRSM) 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) Access Policies or (2) Device Summary Dashboard parameter, aka Bug ID CSCuq80661.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/07/2014
Disclosure
12/12/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73228 | Cisco Prime Security Manager Web cross site scripting | 79 | Not defined | Not defined | CVE-2014-3364 |