中文描述:

Cisco Unified Contact Center Management Portal是美国思科（Cisco）公司的一个直观且安全的基于 Web 的应用程序，允许主管和经理实时满足对联络中心的复杂和多变的需求，使联络中心的管理比以往任何时候都更加轻松和高效。 Cisco Unified Contact Center Management Portal存在跨站脚本漏洞，该漏洞源于基于Web的管理界面没有正确验证用户提供的输入。经过身份验证的、具有较低权限的远程攻击者对该界面的用户发起存储型跨站脚本(XSS)攻击。

英文描述:

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into a specific page of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability, the attacker must have at least a Supervisor role on an affected device.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案:

发布时间:

修改时间:

创建时间:

更新时间:

当前版本: v3

主要语言: EN

支持语言: