PT-2017-16107

CVE-2017-3802

·

Publicado

2017-01-26

·

Atualizado

2017-07-26

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 12.0(0.99000.9)
Description A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system.
Recommendations For version 12.0(0.99000.9), update to a fixed release such as 12.0(0.98000.176), 12.0(0.98000.414), 12.0(0.98000.531), 12.0(0.98000.536), or 12.0(0.98500.8) to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2017-3802
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com