Cross-Site Scripting Vulnerabilities in Cisco Prime Security Manager by Cisco

CVE-2014-3365

Summary

Cisco Prime Security Manager (PRSM) versions up to 9.2.x are susceptible to multiple cross-site scripting vulnerabilities that enable remote attackers to inject arbitrary web script or HTML. This can occur through malicious input submitted to certain pages such as the Dashboard or Configure Realm page. Attackers leveraging this vulnerability can execute unauthorized scripts in the context of a user session, potentially leading to data theft and unauthorized actions within the application.

References