CVE-2014-3329

Опубликовано: 29 июл. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3329
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35065
Vendor Advisory
http://www.securityfocus.com/bid/68926
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030652
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94889
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3329
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35065
Vendor Advisory
http://www.securityfocus.com/bid/68926
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030652
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94889

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:prime_data_center_network_manager:*:*:*:*:*:*:*:*

Версия до 6.3\(2\) (включая)

cpe:2.3:a:cisco:prime_data_center_network_manager:6.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.1\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.2\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.2\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.2\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.2\(5a\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_data_center_network_manager:6.3\(1\):*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00408

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p9w7-pqf8-8w79

github

больше 3 лет назад