漏洞标题
N/A
漏洞描述信息
在Cisco安全访问控制服务器(ACS)上的(1)PreSearch.html和(2)PreSearch.class中,存在多个跨站点脚本(XSS)漏洞。这些漏洞允许远程攻击者通过搜索表单的文本字段 inject任意的网页脚本或HTML。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Cisco Products Online Help 多个跨站脚本攻击漏洞
漏洞描述信息
Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified
CVSS信息
N/A
漏洞类别
跨站脚本