XSS in Altitude Unified Customer Interaction

CVE-2014-9212

Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attackers to inject arbitrary web script or HTML via (1) an email hyperlink or the (2) style parameter in the image attribute section.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.011 (62.9th percentile) — read the EPSS interpretation.