Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 6.1.

Jak se o tom psalo 2

1. 5. 11. 2026 · zachyceno 04:30 · NCSC-FI FI nadpis události

   Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

   Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.1, CVEs: CVE-2026-76419, Summary: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based…

2. 4. 11. 2026 17:00 · Cisco PSIRT US

   Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

   A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a…