Към съдържанието
Търсене

CVE-2025-20310: Cisco Enterprise Chat and Email, XSS

6.1

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To successfully exploit this vulnerability, an attacker would need valid agent credentials.

Засегнати продукти

  • Cisco Cisco Enterprise Chat and Email: 11.6(1)_ES3; 11.6(1)_ES4; 12.0(1)_ES6; 11.6(1)_ES8; 12.0(1)_ES5a; 11.6(1)_ES9; 12.0(1)_ES6_ET1; 11.6(1)_ES6; 11.6(1)_ES5; 12.5(1)_ET1; 12.5(1); 12.5(1)_ES3_ET1; 12.0(1)_ES3; 11.6(1)_ES11; 12.0(1)_ES4; 12.0(1)_ES5; 11.6(1)_ES2; 11.6(1)_ES9a; 11.6(1)_ES10; 12.0(1)_ES1; 12.0(1); 12.5(1)_ES3; 12.6(1); 11.5(1); 12.0(1)_ES2; 11.6(1)_ES7; 12.5(1)_ES2; 12.6(1)_ET1; 11.6(1); 12.5(1)_ES1; 11.5(1)_ES1_ET1; 11.6(1)_ES6_ET1; 11.6(1)_ES1; 11.6(1)_ES8_ET1; 11.5(1)_ES1; 12.6(1)_ET2; 12.5(1)_ES3_ET2; 12.0(1)_ES6_ET2; 12.6(1)_ES1; 12.5(1)_ES4; 11.6(1)_ES12; 12.6(1)_ET3; 12.5(1)_ES4_ET1; 12.0(1)_ES6_ET3; 12.6(1)_ES1_ET1; 12.6(1)_ES2; 12.6_ES2_ET1; 12.5(1)_ES5; 12.6_ES2_ET2; 12.0(1)_ES7; 12.6_ES2_ET3; 12.0(1)_ES7_ET1; 12.5(1)_ES5_ET1; 12.6_ES2_ET4; 12.6(1)_ES3; 11.6(1)_ES12_ET1; 12.6_ES3_ET1; 12.5(1)_ES6; 12.6_ES3_ET2; 12.6(1)_ES4; 12.5(1)_ES7; 12.6(1)_ES4_ET1; 12.6(1)_ES5; 12.6(1)_ES5_ET1; 12.6(1)_ES5_ET2; 12.6(1)_ES6; 12.6(1)_ES6_ET1; 12.5(1)_ES8; 12.6(1)_ES6_ET2; 12.6(1)_ES7; 12.6(1)_ES8; 12.6(1)_ES4_ET2; 12.6(1)_ES3_ET3; 12.6(1)_ES2_ET5; 12.6(1)_ES1_ET2; 12.6(1)_ES8_ET1; 12.6(1)_ES7_ET1; 12.6(1)_ES6_ET3; 12.6(1)_ES5_ET3; 12.5(1)_ES8_ET1; 12.5(1)_ES3_ET3; 12.5(1)_ES5_ET2; 12.5(1)_ES6_ET1; 12.5(1)_ES4_ET2; 12.5(1)_ES7_ET1; 12.6(1)_ES8_ET2; 12.6(1)_ES9; 12.6(1)_ES9_ET1; 12.5(1)_ES9; 12.6(1)_ES9_ET2; 12.6(1)_ES9_ET3; 12.6(1)_ES10; 12.6(1)_ES10_ET1

Вид слабост

История

  • 2 юли 2025 Публикувано

Други уязвимости в Cisco Cisco Enterprise Chat and Email

Първоизточници

CVE-2025-20310: Cisco Enterprise Chat and Email, XSS | freedomonline.bg