Description (CNA)
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability, the attacker must have at least a Supervisor role on an affected device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Unified Contact Center Management Portal | affected 12.5(1)_ES1; affected 11.6(1)_ES11; affected 12.5(1)_ES3; affected 11.6(1)ES2; affected 10.5(1)ES7; affected 11.6(1)_ES17; affected 11.5(1)ES6; affected 12.5(1); affected 11.6(1)ES1; affected 12.0(1)_ES4; affected 10.5(1)ES1; affected 11.5(1)ES1; affected 12.5(1)_ES5; affected 12.0(1)_ES3; affected 11.5(1)ES5; affected 11.6(1)_ES7; affected 12.0(1)_ES1; affected 11.5(1)ES8; affected 11.6(1)_ES9; affected 10.5(1)ES12; affected 11.0(1)ES1; affected 11.6(1)_ES16; affected 11.5(1)ES7; affected 11.5(1)ES3; affected 11.6(1)_ES3; affected 10.5(1)ES11; affected 10.5(1)ES10; affected 11.5(1)ES4; affected 10.5(1)ES3; affected 12.6(1); affected 12.6(1)_ES1; affected 11.6(1); affected 12.0(1)_ES2; affected 11.6(1)_ES13; affected 12.5(1)_ES2; affected 10.5(1)ES2; affected 10.5(1)ES13; affected 11.6(1)_ES12; affected 11.0(1)ES3; affected 11.6(1)_ES5; affected 11.5(1)ES9; affected 10.5(1)ES4; affected 12.6(1)_ES2; affected 12.0(1); affected 10.5(1)ES6; affected 11.6(1)_ES4; affected 11.6(1)_ES14; affected 11.0(1)ES2; affected 12.0(1)_ES5; affected 10.5(1)ES5; affected 12.5(1)_ES4; affected 11.6(1)_ES15; affected 10.5(1)ES8; affected 11.6(1)_ES6; affected 10.5(1)ES9; affected 11.6(1)_ES10; affected 11.5(1)ES2; affected 11.0(1); affected 12.5(1)_ES6; affected 12.6(1)_ES3; affected 12.6(1)_ES4; affected 12.5(1)_ES7; affected 12.6(1)_ES5; affected 12.6(1)_ES6; affected 12.5(1)_ES8; affected 12.5(1)_ES9; affected 12.6(1)_ES7; affected 12.6(1)_ES8; affected 12.5(1)_ES10; affected 10.5(1); affected 11.5(1); affected 12.6(1)_ES9; affected 12.6(1)_ES10; affected 12.5(1)_ES11; affected 12.6(1)_ES11; affected 12.6(1)_ES12; affected 12.5(1)_ES12; affected 12.6(1)_ES13 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.