Unscored CVE-2015-6349 EUVD-2015-6291GHSA-7p9r-h26q-4mf3

Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) …

Published Oct 30, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

20151026 Cisco Secure Access Control Server Reflective Cross-Site Scripting Vulnerability vendor-advisory
1033968 vdb-entry