Security Advisory

CVE-2016-1298

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-01-26 02:00:00
Last updated 2024-08-05 22:48:13
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.