Published: 20/05/2011 Updated: 14/02/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 460

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) prior to 8.6 allow remote malicious users to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco unified operations manager 2.2
cisco unified operations manager 2.0
cisco unified operations manager 2.0.1
cisco unified operations manager
cisco unified operations manager 2.0.2
cisco unified operations manager 1.1
cisco unified operations manager 2.3
cisco unified operations manager 2.1
cisco unified operations manager 8.0
cisco unified operations manager 2.0.3

Cisco Unified Operations Manager contains multiple cross-site scripting vulnerabilities that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks The vulnerability is due to insufficient validation of user-supplied input to certain scripts that make up the affected application An unauthenticated, remote attacke ...

Check Point Reference: CPAI-2011-0745 Date Published: 19 Mar 2024 Severity: Medium ...

Cisco Unified Operations Manager suffers from cross site scripting, remote SQL injection, and directory traversal vulnerabilities Versions 80 and 85 are affected ...

source: wwwsecurityfocuscom/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site ...

source: wwwsecurityfocuscom/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affect ...

source: wwwsecurityfocuscom/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit ...

source: wwwsecurityfocuscom/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected ...

source: wwwsecurityfocuscom/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected s ...

Sense of Security - Security Advisory - SOS-11-006 Release Date 18-May-2011 Last Update - Vendor Notification Date 28-Feb-2011 Product Cisco Unified Operations Manager Common Services Framework Help Servlet Common Service ...

CWE-79 http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html http://tools.cisco.com/security/center/viewAlert.x?alertId=23085 http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf http://www.exploit-db.com/exploits/17304 https://exchange.xforce.ibmcloud.com/vulnerabilities/67521 https://nvd.nist.gov https://packetstormsecurity.com/files/101518/Cisco-Unified-Operations-Manager-XSS-SQL-Injection-Directory-Traversal.html http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20110518-CVE-2011-0959 https://www.exploit-db.com/exploits/35762/

CVE-2011-0959

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect