Cisco: >> Unified Web And E-Mail Interaction Manager >> 11.0(1) Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479.
CVSS Score
4.3
EPSS Score
0.003
Published
2015-12-14
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056.
CVSS Score
6.5
EPSS Score
0.005
Published
2015-08-19