| Package | Affected versions | Patched versions |
|---|---|---|
| unified communications manager im and presence service | = 10.0(1)= 10.0(1)su1= 10.0(1)su2= 10.5(1)= 10.5(1)su1= 10.5(1)su2= 10.5(1)su3= 10.5(2)= 10.5(2)su1= 10.5(2)su2= 10.5(2)su2a= 10.5(2)su3= 10.5(2)su4= 10.5(2)su4a= 10.5(2a)= 10.5(2b)= 11.0(1)= 11.0(1)su1= 11.5(1)= 11.5(1)su1= 11.5(1)su10= 11.5(1)su11= 11.5(1)su2= 11.5(1)su3= 11.5(1)su3a= 11.5(1)su4= 11.5(1)su5= 11.5(1)su5a= 11.5(1)su6= 11.5(1)su7= 11.5(1)su8= 11.5(1)su9= 12.5(1)= 12.5(1)su1= 12.5(1)su2= 12.5(1)su3= 12.5(1)su4= 12.5(1)su5= 12.5(1)su6= 12.5(1)su7= 14.0= 14.0su1= 14.0su2= 14.0su2a |
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an authenticated user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free