CVE-2016-9200: XSS
A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1) 10.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9200?
CVE-2016-9200 is a high severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2016-9200?
To fix CVE-2016-9200, ensure that you update Cisco Prime Collaboration Assurance to a version that is not affected, such as 10.6.1 or later.
What is the exploitability of CVE-2016-9200?
CVE-2016-9200 can be exploited remotely by an unauthenticated attacker, making it particularly dangerous.
Which versions of Cisco Prime Collaboration Assurance are affected by CVE-2016-9200?
CVE-2016-9200 affects Cisco Prime Collaboration Assurance versions 10.5(1) and 10.6.0.
What type of attack is facilitated by CVE-2016-9200?
CVE-2016-9200 facilitates a cross-site scripting (XSS) attack that can compromise user interactions with the web interface.