CVE-2016-1476

Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024.

Severity	MEDIUM
CVSS	5.4
EPSS	0.19%
CWE	CWE-79
KEV
Published	9 years ago
Modified	2 weeks ago

CSAF Product Statuses

Product	Status	Source	Advisory	Rows
Cisco IP Phone 8800 Series Software	known_affected	cisco_csaf	cisco-sa-20160810-ip-phone-8800	1

Related Products

Product	Advisory
Cisco IP phone	cisco-sa-20160810-ip-phone-8800
Cisco IP Phone 8800 Series Software	cisco-sa-20160810-ip-phone-8800
Cisco 8000 Series Routers	cisco-sa-20160810-ip-phone-8800