Unscored CVE-2015-4294 EUVD-2015-4317GHSA-q9cm-f5gg-2mmq

Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web s…

Published Aug 1, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages incomplete filtering of HTML elements, aka Bug ID CSCut41766.

References

1033171 vdb-entry
20150730 Cisco IM and Presence Service Reflected Cross-Site Scripting Vulnerability vendor-advisory