XSS in Cisco Unified Computing System Director
CVE-2018-15406
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an af…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (58.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified Computing System Director — versions n/a
Weakness classification (CWE)
References
- 20181003 Cisco UCS Director Stored Cross-Site Scripting Vulnerability (x_refsource_CISCO, vendor-advisory)
- 1041783 (vdb-entry, x_refsource_SECTRACK)