CVE-2015-6434: XSS

Published Jan 8, 2016

Updated

Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856.

Affected Software

1 affected component

cisco Prime Infrastructure=2.2\(2\)

Event History

Jan 8, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6434?

CVE-2015-6434 is considered to have a moderate severity level due to its potential for clickjacking attacks.

How do I fix CVE-2015-6434?

To fix CVE-2015-6434, upgrade to a version of Cisco Prime Infrastructure that has mitigated this vulnerability.

What type of attacks can be conducted using CVE-2015-6434?

CVE-2015-6434 can be exploited for clickjacking and possibly other unspecified attacks through malicious websites.

Which versions of Cisco Prime Infrastructure are affected by CVE-2015-6434?

CVE-2015-6434 specifically affects Cisco Prime Infrastructure version 2.2(2).

Is there a workaround for CVE-2015-6434?

There are no specific workarounds for CVE-2015-6434, so patching is recommended.