CVE-2014-3325 in Unified Customer Voice Portal

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2014-05-07

Divulgación

2014-07-19

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
70399	Cisco Unified Customer Voice Portal secuencias de comandos en sitios cruzados	79	No está definido	No está definido	CVE-2014-3325

Fuentes

• MITRE
• NVD
• CVE Details