Unscored CVE-2015-6434 EUVD-2015-6375GHSA-8m35-36f3-cg86

Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickja…

Published Jan 8, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856.

References

20160105 Cisco Prime Infrastructure Frame Injection Vulnerability vendor-advisory
1034582 vdb-entry