VulnerabilityModified
CVE-2013-6690
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038,…
MEDIUM 4.3EPSS 2.08%
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.08% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/prime collaboration
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/55954
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6690Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31998Vendor Advisory
- http://www.securitytracker.com/id/1029425Third Party Advisory, VDB Entry
- http://secunia.com/advisories/55954
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6690Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=31998Vendor Advisory
- http://www.securitytracker.com/id/1029425Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.