Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability
Vulnerability Description
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface. An attacker could exploit this vulnerability by adding malicious code to the configuration by using the web-based management interface. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface or access sensitive, browser-based information.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
替代XSS语法转义处理不恰当
Vulnerability Title
Cisco Common Services Platform Collector 跨站脚本漏洞
Vulnerability Description
Cisco Common Services Platform Collector（CSPC）是美国思科（Cisco）公司的一款通用服务平台数据收集器。该产品通过轮询思科设备的基本库存和配置数据分析网络性能，并识别风险和漏洞。 Cisco Common Services Platform Collector存在安全漏洞，该漏洞源于思科公共服务平台收集器(Cisco Common Services Platform Collector, CSPC)基于web的管理界面的一个漏洞可能允许经过身份验证的远程攻击者
CVSS Information
N/A
Vulnerability Type
N/A