CVE-2019-1670: Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to click a specific link. A successful exploit could allow the attacker to submit arbitrary requests to the affected system via a web browser with the privileges of the user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1670?
CVE-2019-1670 is a vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software that could allow an attacker to conduct a cross-site scripting (XSS) attack.
How does CVE-2019-1670 affect Cisco Unified Intelligence Center Software?
CVE-2019-1670 affects the web-based management interface of Cisco Unified Intelligence Center Software, allowing an attacker to perform an XSS attack.
What is the severity of CVE-2019-1670?
The severity of CVE-2019-1670 is medium, with a CVSS severity score of 6.1.
How can an attacker exploit CVE-2019-1670?
An attacker can exploit CVE-2019-1670 by tricking a user of the web interface into clicking on a specially crafted link that executes malicious scripts.
Is there a fix for CVE-2019-1670?
Yes, Cisco has released a security advisory with the necessary patches and mitigations to address CVE-2019-1670.