CVE-2015-0714

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
ciscofinesse
10.0\(1\)_base
ciscofinesse
10.5\(1\)_base
ciscofinesse
10.6\(1\)_base
ciscofinesse
11.0\(1\)_base
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/viewAlert.x?alertId=38607
http://www.securitytracker.com/id/1032222
http://tools.cisco.com/security/center/viewAlert.x?alertId=38607
http://www.securitytracker.com/id/1032222