Vulnerability Description
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Content Security Management Appliance | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3396Vendor Advisory
- http://www.securityfocus.com/bid/60829
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3396Vendor Advisory
- http://www.securityfocus.com/bid/60829
FAQ
What is CVE-2013-3396?
CVE-2013-3396 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web script...
How severe is CVE-2013-3396?
CVE-2013-3396 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-3396?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Content Security Management Appliance.