CVE-2018-0205: XSS

Published Feb 22, 2018

Updated

A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by placing a malicious string in the Prime Collaboration Provisioning database. A successful exploit could allow the attacker to access Cisco Prime Collaboration Provisioning by injecting crafted data into the database. Cisco Bug IDs: CSCvd86609.

Affected Software

1 affected component

Cisco Prime Collaboration Provisioning=12.1

Event History

Feb 22, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0205?

The severity of CVE-2018-0205 is medium with a CVSS score of 6.1.

How does CVE-2018-0205 affect Cisco Prime Collaboration Provisioning Tool?

CVE-2018-0205 affects Cisco Prime Collaboration Provisioning Tool version 12.1.

What is the vulnerability of CVE-2018-0205?

CVE-2018-0205 is a cross-site scripting (XSS) vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool.

How can an attacker exploit CVE-2018-0205?

An attacker can exploit CVE-2018-0205 by placing malicious scripts in the User Provisioning tab, potentially allowing them to conduct cross-site scripting attacks.

Is there a fix available for CVE-2018-0205?

Yes, Cisco has released a security advisory with necessary patches or updates to address CVE-2018-0205.