CVE-2015-6337: XSS

Published Jan 26, 2016

Updated

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238.

Affected Software

2 affected components

Cisco Application Policy Infrastructure Controller Enterprise Module=1.0.10

Cisco Application Policy Infrastructure Controller Enterprise Module=1.0_ga

Event History

Jan 26, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6337?

CVE-2015-6337 is classified as a high-severity cross-site scripting (XSS) vulnerability.

How do I fix CVE-2015-6337?

To remediate CVE-2015-6337, upgrade to the latest version of Cisco Application Policy Infrastructure Controller Enterprise Module that addresses this vulnerability.

Who is affected by CVE-2015-6337?

CVE-2015-6337 affects users of Cisco Application Policy Infrastructure Controller Enterprise Module version 1.0.10 and 1.0_ga.

What type of vulnerability is CVE-2015-6337?

CVE-2015-6337 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.

What is the exploitation vector for CVE-2015-6337?

CVE-2015-6337 can be exploited by injecting malicious code through a crafted hostname in an SNMP response.