Medium WID-SEC-2025-0280 1 CVE

Cisco Expressway: Schwachstelle ermöglicht Cross-Site Scripting

Published Feb 5, 2025 · Updated Feb 5, 2025 · de-DE

Vendor: Cisco Product: Expressway

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Expressway ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Cisco Expressway ermöglicht die Nutzung verschiedener Intranetdienste aus dem Internet, ohne ein VPN zu benötigen.

Vulnerabilities 1

Medium 6.1

CVE-2025-20179

Cisco Expressway Series Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based ma…

Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices

Feb 5, 2025

Revision history

2025-02-05 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-expressway-xss-uexUZrEW vom 2025-02-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-xss-uexUZrEW