CVE-2013-3416
Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbitrary web script or HTML via an…
Does this matter?
Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuh47574 and CSCuh95997.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.15% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/unified operations manager · cisco/unified service monitor
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3416
- http://www.securitytracker.com/id/1028765
- http://www.securitytracker.com/id/1028766
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3416
- http://www.securitytracker.com/id/1028765
- http://www.securitytracker.com/id/1028766
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.