CVE-2014-3324

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server Software version 4.0(2.8)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the login page of the administrative web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via a crafted parameter.

Recommendations For Cisco TelePresence Server Software version 4.0(2.8), consider restricting access to the administrative web interface until a fix is available. As a temporary workaround, avoid using the vulnerable login page in the administrative web interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.