Cross-Site Scripting Vulnerability in Cisco Application and Content Networking System
CVE-2015-0774

Currently unrated

Key Information:

Vendor
Cisco
Status
Application And Content Networking System Software
Vendor
CVE Published:
12 June 2015

Summary

A Cross-Site Scripting (XSS) vulnerability exists in Cisco's Application and Content Networking System (ACNS) version 5.5(9). This flaw permits remote attackers to inject arbitrary web scripts or HTML through specially crafted URLs, potentially leading to unauthorized actions or data exposure. The issue has been tracked under Bug ID CSCuu70650. Organizations using the affected version should take immediate steps to mitigate the risk by applying recommended security patches.

References

http://www.securitytracker.com/id/1032539
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/viewAlert.x?alertI...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.