Description
Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur19630, and CSCur19661.
References
- 20141222 Cisco Unified Communications Domain Manager XSS Vulnerability vendor-advisory
- 1031424 vdb-entry
- 71771 vdb-entry