Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software by using the HTTP POST method. An attacker who can submit malicious scripts to the affected user interface element could execute arbitrary script or HTML code in the user's browser in the context of the affected site. Cisco Bug IDs: CSCvj33287.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Cisco Webex 跨站脚本漏洞
Vulnerability Description
Cisco WebEx是美国思科（Cisco）公司的一套Web会议工具，该工具可协助异地办公人员进行协调合作。WebEx服务包括Web会议、网真视频会议和企业即时消息(IM)等。 Cisco Webex中的Web框架存在跨站脚本漏洞，该漏洞源于程序没有充分的验证通过HTTP POST方法传递到受影响软件的参数。远程攻击者可通过提交恶意的脚本利用该漏洞在用户浏览器中执行任意的脚本或HTML代码。
CVSS Information
N/A
Vulnerability Type
N/A