VulnerabilityModified

CVE-2011-0959

EXPLOIT ×6 ✓MEDIUM 4.3EPSS 21.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 21.5%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 21.46% probability · 98th percentile
Public exploits: 6 in Exploit-DB · verified · first 18 May 2011
CISA KEV: Not listed
Weakness: CWE-79
Affected: cisco/unified operations manager
Source: psirt@cisco.com

EPSS trend

EPSS 21.5% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (6)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-35766 source ↗	Cisco Unified Operations Manager 8.5 - '/iptm/logicalTopo.do' Multiple Cross-Site Scripting Vulnerabilitieshardware · Sense of Security	remote	18 June 2011	yes
EDB-35765 source ↗	Cisco Unified Operations Manager 8.5 - '/iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp' Multiple Cross-Site Scripting Vulnerabilitieshardware · Sense of Security	remote	18 June 2011	yes
EDB-35764 source ↗	Cisco Unified Operations Manager 8.5 - iptm/eventmon Multiple Cross-Site Scripting Vulnerabilitieshardware · Sense of Security	remote	18 June 2011	yes
EDB-35763 source ↗	Cisco Unified Operations Manager 8.5 - 'iptm/ddv.do?deviceInstanceName' Cross-Site Scriptinghardware · Sense of Security	remote	18 June 2011	yes
EDB-35762 source ↗	Cisco Unified Operations Manager 8.5 - 'iptm/advancedfind.do?extn' Cross-Site Scriptinghardware · Sense of Security	remote	18 June 2011	yes
EDB-17304 source ↗	Cisco Unified Operations Manager - Multiple Vulnerabilitieswindows · Sense of Security	remote	18 May 2011	yes

References

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.htmlExploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23085Vendor Advisory
http://www.exploit-db.com/exploits/17304Exploit
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdfExploit, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67521
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.htmlExploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23085Vendor Advisory
http://www.exploit-db.com/exploits/17304Exploit
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdfExploit, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67521

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.