CVE-2014-0735: XSS
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0735?
CVE-2014-0735 has been classified as a high severity vulnerability due to its potential for Cross-site Scripting attacks.
How do I fix CVE-2014-0735?
To fix CVE-2014-0735, it is recommended to update Cisco Unified Communications Manager to a version that is not affected by this vulnerability.
What does CVE-2014-0735 allow attackers to do?
CVE-2014-0735 allows remote attackers to inject arbitrary web scripts or HTML into the IP Manager Assistant interface.
Which versions of Cisco Unified Communications Manager are affected by CVE-2014-0735?
CVE-2014-0735 affects Cisco Unified Communications Manager 10.0(1) and earlier versions.
Is there a workaround for CVE-2014-0735?
Currently, there is no documented workaround for CVE-2014-0735; the best course of action is to apply the necessary updates.