CVE-2015-4310: XSS

Published Aug 19, 2015

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug IDs CSCuq82322, CSCut95853, and CSCuq73975.

Affected Software

1 affected component

Cisco Finesse=10.5\(1\)_base

Event History

Aug 19, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4310?

CVE-2015-4310 is classified as a high-severity vulnerability due to its potential for remote exploitation.

How do I fix CVE-2015-4310?

To mitigate CVE-2015-4310, update Cisco Finesse to the latest version that addresses these cross-site scripting vulnerabilities.

What type of vulnerability is CVE-2015-4310?

CVE-2015-4310 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.

What software is affected by CVE-2015-4310?

CVE-2015-4310 affects Cisco Finesse version 10.5(1) and potentially other related applications.

Can CVE-2015-4310 be exploited via simple scripting?

Yes, CVE-2015-4310 can be exploited by remote attackers through simple scripting in GET or POST requests.