CVE-2016-1401 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via...
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified computing system central software | = 1.4(1a) | No fix listed |
References
- 20160517 Cisco Unified Computing System Central Cross-Site Scripting Vulnerability vendor-advisory
- 1035933 vdb-entry