CVE Feed

    Dashboard / CVE / CVE-2013-5482

    CVE-2013-5482

    Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCug77823.

    Published:Sep 13, 2013
    Last Modified:Apr 11, 2025
    EPS:Sep 13, 2013
    EPSS Score:0.00217
    CVSS Score:4.3

    Affected Products

    Vendor
    Cisco
    Product
    Prime Lan Management Solution

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-12225 (CVSS 6.5) — A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticat…
    CVE-2016-1360 (CVSS 7.1) — Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different…
    CVE-2015-0594 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cis…
    CVE-2013-5488 (CVSS 5) — Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Uni…
    CVE-2013-1196 (CVSS 6.8) — The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Con…
    CVE-2013-1125 (CVSS 6.8) — The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), App…
    CVE-2012-6392 (CVSS 10) — Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication…
    CVE-2011-4237 (CVSS 4.3) — CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High