CVE-2015-4220: XSS
Published Jun 25, 2015
·Updated
Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.
Affected Software
1 affected component
Cisco Unified Presence Server=9.1\(1\)
Event History
Jun 25, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4220?
CVE-2015-4220 has a severity rating that suggests a potential significant impact on affected systems due to the XSS vulnerability.
2
How do I fix CVE-2015-4220?
To mitigate CVE-2015-4220, ensure that you apply the latest patches provided by Cisco for Unified Presence Server version 9.1(1).
3
What systems are affected by CVE-2015-4220?
CVE-2015-4220 specifically affects Cisco Unified Presence Server version 9.1(1).
4
What type of vulnerability is CVE-2015-4220?
CVE-2015-4220 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2015-4220 be exploited remotely?
Yes, CVE-2015-4220 can be exploited by remote attackers to inject arbitrary web scripts or HTML.