Cross-Site Scripting Vulnerability in Cisco Prime Collaboration Assurance
CVE-2016-9200

6.1MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Prime Collaboration Assurance
Vendor
CVE Published:
14 December 2016

What is CVE-2016-9200?

A vulnerability exists in the web framework code of Cisco Prime Collaboration Assurance, allowing an unauthenticated, remote attacker to exploit the system via cross-site scripting. This could potentially compromise the security of users interacting with the web interface, leading to unauthorized actions and exposure of sensitive information.

Affected Version(s)

Cisco Prime Collaboration Assurance Cisco Prime Collaboration Assurance

References

http://www.securityfocus.com/bid/94806
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037414
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.