ID de Prueba:	1.3.6.1.4.1.25623.1.0.107074
Categoría:	CISCO
Título:	Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Resumen:	Multiple vulnerabilities in the web framework code of the Cisco Prime;Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS);attack against the user of the web interface of the affected system.
Descripción:	Summary: Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. Vulnerability Insight: The vulnerability is due to insufficient input validation of some parameters passed to the web server. Vulnerability Impact: An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting malicious code. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Affected Software/OS: Cisco Prime Collaboration Provisioning version 10.6.0 is vulnerable. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6451 BugTraq ID: 93917 http://www.securityfocus.com/bid/93917 http://www.securitytracker.com/id/1037112
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.