Unscored CVE-2015-4272 EUVD-2015-4295GHSA-fmjc-gqw6-mrv8

Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(…

Published Jul 14, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580.

References

20150713 Cisco Unified Communications Manager ccmivr Page Cross-Site Scripting Vulnerability vendor-advisory
1032888 vdb-entry