Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and CSCun18263.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Prime Lan Management Solution | - |
| Cisco | Security Manager | All versions |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594Vendor Advisory
- http://www.securityfocus.com/bid/72793
- http://www.securitytracker.com/id/1031813
- http://www.securitytracker.com/id/1031814
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594Vendor Advisory
- http://www.securityfocus.com/bid/72793
- http://www.securitytracker.com/id/1031813
- http://www.securitytracker.com/id/1031814
FAQ
What is CVE-2015-0594?
CVE-2015-0594 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers ...
How severe is CVE-2015-0594?
CVE-2015-0594 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0594?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Prime Lan Management Solution, Cisco Security Manager.