MEDIUM✓ PATCH🇬🇧 English

CVE-2018-0386

CVSS 6.1v3.0pub. 2018-08-15upd. 2024-11-21

A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulnerability is due to improper validation of input that is passed to the affected software. An attacker could exploit this vulnerability by persuading a user of the affected software to access a malicious URL. A successful exploit could allow the attacker to access sensitive, browser-based information on the affected system or perform arbitrary actions in the affected software in the security context of the user. Cisco Bug IDs: CSCvh49694.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Cisco Hosted Collaboration Solution

    APP
    Cisco
    11.5\(1\)

  • Cisco Unified Communications Domain Manager

    APP
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2018-0124CRITICAL9.8ten sam produkt

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker...

CVE-2017-12337CRITICAL9.8ten sam produkt

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating Sy...

CVE-2017-9805HIGH8.1⚠ KEVten sam produkt

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHand...

CVE-2018-0364HIGH8.8ten sam produkt

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could all...

CVE-2014-2198HIGH10.0ten sam produkt

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcode...