Unscored CVE-2014-3313 EUVD-2014-3326GHSA-p26p-cpc6-vcr8

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers…

Published Jul 9, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=34885
1030553 vdb-entry
68464 vdb-entry
cisco-small-cve20143313-xss(94422) vdb-entry
20140708 Cisco Small Business SPA300 and SPA500 Series IP Phones Cross-Site Scripting Vulnerability vendor-advisory
59808 third-party-advisory