Unscored CVE-2016-6425 EUVD-2016-7348GHSA-984x-4wwc-f3w9

Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Cente…

Published Oct 6, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652.

References

93422 vdb-entry
20161005 Cisco Unified Intelligence Center (CUIC) Software Cross-Site Scripting Vulnerability vendor-advisory
1036951 vdb-entry