CVE-2013-3440

EUVD-2013-3375
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
ciscounified_operations_manager
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/95584
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440
http://tools.cisco.com/security/center/viewAlert.x?alertId=30175
http://www.securityfocus.com/bid/61414
http://www.securitytracker.com/id/1028819
http://osvdb.org/95584
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440
http://tools.cisco.com/security/center/viewAlert.x?alertId=30175
http://www.securityfocus.com/bid/61414
http://www.securitytracker.com/id/1028819