Detections
Analytics
CVE-2011-0962
medium
Description
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug ID CSCto12712.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/67524
https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0974
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
http://www.exploit-db.com/exploits/17304
http://tools.cisco.com/security/center/viewAlert.x?alertId=23087
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html