Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCug77823.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Prime LAN Management Solution 跨框架脚本漏洞
Vulnerability Description
Cisco Prime LAN Management Solution(LMS)是美国思科(Cisco)公司的一套基于局域网的网络管理解决方案。该解决方案可对网络进行配置、管理、监控和维护。 Cisco Prime LMS中存在跨框架脚本漏洞,该漏洞源于程序没有正确限制HTML IFRAME的使用。远程攻击者可通过特制的网站利用该漏洞实施点击劫持攻击,也可能存在其他客户端浏览器的攻击。
CVSS Information
N/A
Vulnerability Type
N/A