XSS in Cisco Prime_lan_management_solution
CVE-2015-0594
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (49.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Prime_lan_management_solution
- Cisco Security_manager
- N/a — versions n/a
Weakness classification (CWE)
References
- 1031813 (vdb-entry, x_refsource_SECTRACK)
- 1031814 (vdb-entry, x_refsource_SECTRACK)
- 20150226 Cisco Common Services Cross-Site Scripting Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- 72793 (vdb-entry, x_refsource_BID)