CVE-2016-1476

Description

Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-2575

http://www.securitytracker.com/id/1036595

http://www.securityfocus.com/bid/92404

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-ip-phone-8800

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS