CVE-2011-0962

Public PoC / Exploit (2)

Exploit-DBCisco Unified Operations Manager 8.5 - Common Services Device Center Cross-Site Scripting Exploit-DBCisco Unified Operations Manager - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject arbitrary web script or HTML via the tag parameter, aka Bug ID CSCto12712.

Weaknesses (CWE)

CWE-79

Affected Products (10)

cisco · unified_operations_managervulnerable

References (10)

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Exploit

http://tools.cisco.com/security/center/viewAlert.x?alertId=23087

http://www.exploit-db.com/exploits/17304

Exploit

http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf

ExploitURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/67524

http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html

Exploit

http://tools.cisco.com/security/center/viewAlert.x?alertId=23087

http://www.exploit-db.com/exploits/17304