Cisco : Security Vulnerabilities, CVEs, Published In July 2014 (XSS)
Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
Max CVSS
4.3
EPSS Score
0.16%
Published
2014-07-29
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733.
Max CVSS
4.3
EPSS Score
0.13%
Published
2014-07-19
Updated
2017-01-12
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060.
Max CVSS
4.3
EPSS Score
0.21%
Published
2014-07-26
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.
Max CVSS
4.3
EPSS Score
0.25%
Published
2014-07-10
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Max CVSS
4.3
EPSS Score
0.26%
Published
2014-07-09
Updated
2017-08-29
5 vulnerabilities found