Security Advisory
CVE-2016-1298
6.1
MEDIUM
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.
Published Date
January 26, 2016
Official Source
NIST NVD Advisory