CVE Feed

    Dashboard / CVE / CVE-2015-4220

    CVE-2015-4220

    Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.

    Published:Jun 25, 2015
    Last Modified:Apr 12, 2025
    EPS:Jun 25, 2015
    EPSS Score:0.00416
    CVSS Score:4.3

    Affected Products

    Vendor
    Cisco
    Product
    Unified Presence Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2014-3339 (CVSS 6.5) — Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Man…
    CVE-2014-3328 (CVSS 5) — The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial…
    CVE-2013-6983 (CVSS 6.5) — SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated …
    CVE-2013-1242 (CVSS 5) — Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to caus…
    CVE-2013-1137 (CVSS 7.8) — Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial …
    CVE-2011-1643 (CVSS 10) — Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5…
    CVE-2010-2840 (CVSS 7.8) — The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not pr…
    CVE-2010-2839 (CVSS 7.8) — SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a deni…
    CVE-2009-2874 (CVSS 7.8) — The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote at…
    CVE-2008-1158 (CVSS 7.8) — The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a de…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High