cisco-sa-prime-collab-xss-fQMDE5GO: Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Published Sep 1, 2021

Updated

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-prime-collab-xss-fQMDE5GO

Credit

Christoph Rottermanner(it), reporting this vulnerability.

Affected Software

1 affected component

Cisco Prime Collaboration Provisioning

Event History

Sep 1, 2021

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeaknessAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-34732

Frequently Asked Questions

What is the severity of cisco-sa-prime-collab-xss-fQMDE5GO?

The severity of cisco-sa-prime-collab-xss-fQMDE5GO is classified as high due to its potential for cross-site scripting attacks.

How do I fix cisco-sa-prime-collab-xss-fQMDE5GO?

To fix cisco-sa-prime-collab-xss-fQMDE5GO, update Cisco Prime Collaboration Provisioning to the latest patched version provided by Cisco.

Who is affected by cisco-sa-prime-collab-xss-fQMDE5GO?

Users of the web-based management interface of Cisco Prime Collaboration Provisioning are affected by cisco-sa-prime-collab-xss-fQMDE5GO.

What type of attack does cisco-sa-prime-collab-xss-fQMDE5GO involve?

cisco-sa-prime-collab-xss-fQMDE5GO involves a cross-site scripting (XSS) attack that can be executed by an unauthenticated remote attacker.

Is cisco-sa-prime-collab-xss-fQMDE5GO exploitable without authentication?

Yes, cisco-sa-prime-collab-xss-fQMDE5GO is exploitable by unauthenticated attackers, allowing them to execute scripts in the context of the user's session.