Cross-Site Scripting (XSS) Vulnerabilities in Cisco Unified Operations Manager Administrative Web Interface (Bug ID CSCud80186)

Cross-Site Scripting (XSS) Vulnerabilities in Cisco Unified Operations Manager Administrative Web Interface (Bug ID CSCud80186)

CVE-2013-3440 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.

Learn more about our Cis Benchmark Audit For Cisco.