XSS in Cisco Unified Communications Domain Manager

CVE-2013-1227

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCug37902.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_domain_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)