Unscored CVE-2012-4970 EUVD-2012-4894GHSA-2p7g-6fmh-wpf3

Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.…

Published Jan 1, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

1027926 vdb-entry
20121226 Polycom HDX Video End Points Web Management Cross Site Scripting (XSS) vulnerability mailing-list
http://knowledgebase-iframe.polycom.com/kb/knowledgebase/End%20User/Tech%20Alerts/Video/15990_fHDX%20XSS%20Vulnerability%20-%20Security%20Bulletin%20101521.pdf