XSS in Cisco Network Analysis Module 2304
CVE-2015-0656
Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (68.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Network_analysis_module_2304
- Cisco Network_analysis_module_2320
- Cisco Network_analysis_module_firmware — versions 6.0\(2\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)