CVE-2012-6397: XSS
Published Jan 17, 2013
·Updated
Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977.
Affected Software
2 affected components
Cisco Quad
Cisco Webex Social
Event History
Jan 17, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6397?
CVE-2012-6397 has been assigned a moderate severity level due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2012-6397?
To fix CVE-2012-6397, update your Cisco WebEx Social or Cisco Quad to the latest version provided by Cisco.
3
What systems are affected by CVE-2012-6397?
CVE-2012-6397 affects Cisco WebEx Social and Cisco Quad software applications.
4
Can CVE-2012-6397 be exploited by remote attackers?
Yes, CVE-2012-6397 can be exploited by remote attackers to inject arbitrary web script or HTML into affected systems.
5
What type of vulnerability is CVE-2012-6397?
CVE-2012-6397 is a cross-site scripting (XSS) vulnerability, which allows for the injection of harmful scripts.