Medium WID-SEC-2024-0782 1 CVE

Cisco Unified Communications Manager IM & Presence Service: Schwachstelle ermöglicht Cross-Site Scripting

Published Apr 3, 2024 · Updated Nov 27, 2024 · Revision 2 · de-DE

Vendor: Cisco Product: Unified Communications Manager IM & Presence Service Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Unified Communications Manager IM & Presence Service ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Der Cisco Unified Communications Manager (CUCM) (ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.

Vulnerabilities 1

Medium 6.1

CVE-2024-20310

A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM…

Cisco Cisco IOS XE Software Cisco Unified Communications Manager IM and Presence Service iOS Network devices

Apr 3, 2024

Revision history

2024-11-27 #2
Plattformauswahl angepasst
2024-04-03 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-04-03
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-imps-xss-quWkd9yF?Presence_Service_Cross-Site_Scripting_Vulnerability=