Unscored severity · published Oct 19, 2011
CVE-2011-3294
Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
Telepresence Video Communication Servers · Cisco
All versions, or not specified · source: NVD
TV
Telepresence Video Communication Servers Software · Cisco
through x6.1; x5.2; x6.0 · source: NVD
Affected product
TV
Telepresence Video Communication Servers
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3294
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3294
securitytracker.com
http://securitytracker.com/id?1026186
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html
www.securityfocus.com
http://www.securityfocus.com/bid/50084
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70563