Unscored CVE-2014-3324 EUVD-2014-3337GHSA-crwp-h886-vx7j

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Soft…

Published Jul 26, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060.

References

20140724 Cisco TelePresence Management Interface Vulnerability vendor-advisory
60456 third-party-advisory
68885 vdb-entry
1030640 vdb-entry
cisco-telepresence-cve20143324-xss(94847) vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=35031