cisco-sa-tms-xss-kGw4DX9Y: Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

Published Apr 3, 2024

Updated

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.This vulnerability is due to insufficient input validation by

Affected Software

1 affected component

cisco TelePresence Management Suite

Event History

Apr 3, 2024

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-20334

Frequently Asked Questions

What is the severity of vulnerability cisco-sa-tms-xss-kGw4DX9Y?

The severity of vulnerability cisco-sa-tms-xss-kGw4DX9Y is classified as medium.

How do I fix vulnerability cisco-sa-tms-xss-kGw4DX9Y?

To fix vulnerability cisco-sa-tms-xss-kGw4DX9Y, upgrade to the latest version of Cisco TelePresence Management Suite as recommended by Cisco.

Who is affected by vulnerability cisco-sa-tms-xss-kGw4DX9Y?

Users of the Cisco TelePresence Management Suite web-based management interface are affected by vulnerability cisco-sa-tms-xss-kGw4DX9Y.

What type of attack is associated with vulnerability cisco-sa-tms-xss-kGw4DX9Y?

Vulnerability cisco-sa-tms-xss-kGw4DX9Y is associated with a cross-site scripting (XSS) attack.

What causes vulnerability cisco-sa-tms-xss-kGw4DX9Y?

Vulnerability cisco-sa-tms-xss-kGw4DX9Y is caused by insufficient input validation in the management interface of Cisco TelePresence Management Suite.