CVE-2014-3365 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via crafted input to the....
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via crafted input to the (1) Dashboard or (2) Configure Realm page, aka Bug ID CSCuo94808.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime security manager | <= 9.2.1-2 | No fix listed |
References
- 20150209 Cisco Prime Security Manager Cross-Site Scripting Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 1031716 vdb-entry
- cisco-prime-cve20143365-xss(100756) vdb-entry