Unscored CVE-2015-6390 EUVD-2015-6332GHSA-4wmg-rcg8-wcjw

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject …

Published Dec 3, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741.

References

1034286 vdb-entry
20151202 Cisco Unity Connection Cross-Site Scripting Vulnerability vendor-advisory