CVE-2019-1856— Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to the insufficient validation of data supplied by external devices to the web-based management interface of an affected PCA device. An attacker in control of devices integrated with an affected PCA device could exploit this vulnerability by using crafted data in certain fields of the controlled devices. A successful exploit could allow the attacker to execute arbitrary script code in the context of the PCA web-based management interface or allow the attacker to access sensitive browser-based information.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Cisco Prime Collaboration Assurance 跨站脚本漏洞

Cisco Prime Collaboration Assurance（PCA）是美国思科（Cisco）公司的一套企业协作网络管理解决方案。该产品支持通过统一管理控制台简化统一通信和视频协作网络的管理，以及快速部署通信站点等。 Cisco PCA中基于Web的管理界面存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

N/A

N/A