CVE-2015-4206: XSS
Published Dec 15, 2015
·Updated
Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266.
Affected Software
8 affected components
Cisco Unified Communications Manager=8.0\(2c\)
Cisco Unified Communications Manager=8.0\(3\)
Cisco Unified Communications Manager=8.0_base
Cisco Unified Communications Manager=8.5.1
Cisco Unified Communications Manager=8.5_base
Cisco Unified Communications Manager=8.6.1
Cisco Unified Communications Manager=8.6.2
Cisco Unified Communications Manager=8.6_base
Event History
Dec 15, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4206?
CVE-2015-4206 has been rated as medium severity due to the ability for remote attackers to bypass XSS protections.
2
How do I fix CVE-2015-4206?
To mitigate CVE-2015-4206, apply the latest security patches provided by Cisco for affected versions of Unified Communications Manager.
3
What versions of Cisco Unified Communications Manager are affected by CVE-2015-4206?
CVE-2015-4206 affects Cisco Unified Communications Manager versions 8.0 through 8.6.
4
Can CVE-2015-4206 be exploited remotely?
Yes, CVE-2015-4206 can be exploited remotely by attackers to bypass XSS protections.
5
What type of vulnerability is CVE-2015-4206 classified as?
CVE-2015-4206 is classified as a cross-site scripting (XSS) vulnerability.