CVE-2011-0959

Published: May 20, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716.

Affected (10)

Products: Cisco: Unified Operations Manager

Cisco

1 product

Unified Operations Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Operations Manager	Up to 8.5
Cisco Unified Operations Manager	Version 1.1
Cisco Unified Operations Manager	Version 2.0.1
Cisco Unified Operations Manager	Version 2.0.2
Cisco Unified Operations Manager	Version 2.0.3
Cisco Unified Operations Manager	Version 2.0
Cisco Unified Operations Manager	Version 2.1
Cisco Unified Operations Manager	Version 2.2
Cisco Unified Operations Manager	Version 2.3
Cisco Unified Operations Manager	Version 8.0