CVE-2013-3440: XSS

Published Jul 23, 2013

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.

Affected Software

1 affected component

cisco Unified Operations Manager

Event History

Jul 23, 2013

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3440?

CVE-2013-3440 is classified as a medium severity vulnerability.

How do I fix CVE-2013-3440?

To address CVE-2013-3440, ensure you apply the latest security patches provided by Cisco for Unified Operations Manager.

What types of attacks can CVE-2013-3440 facilitate?

CVE-2013-3440 can facilitate remote cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts.

Who is affected by CVE-2013-3440?

CVE-2013-3440 affects users of Cisco Unified Operations Manager with its administrative web interface exposed.

What are the implications of a successful exploit of CVE-2013-3440?

Successful exploitation of CVE-2013-3440 allows attackers to obtain improperly secured cookies and potentially hijack user sessions.