Unscored CVE-2016-1298 EUVD-2016-2397GHSA-fv7m-7x77-vccj

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow re…

Published Jan 26, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.

References

1034828 vdb-entry
20160125 Cisco Unified Contact Center Express Cross-Site Scripting Vulnerability vendor-advisory