4.3
CVSSv2

CVE-2015-0752

Published: 29/05/2015 Updated: 04/01/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco telepresence video communication server x8.5.1

Vendor Advisories

A vulnerability in TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack The vulnerability is due to insufficient validation of user-supplied input submitted to and processed by an affected device An attacker could exploit this vulnerability by convincing a us ...