جزئیات آسیب‌پذیری
CVE-2026-76419
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
شرح رسمی (انگلیسی)
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 6.1متوسط | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Unified Communications Manager | 14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 14SU6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13010-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13011-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13012-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13013-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13014-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13015-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13016-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15.0.1.13017-1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Communications Manager | 15SU4a | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۸/۱۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۳
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
امتیاز EPSS برای این CVE هنوز منتشر نشده است.
ضعف‌ها (CWE)
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')