CVE-2015-0696

Published: Apr 15, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977.

Affected (14)

Products: Cisco: Telepresence Tc Software

Cisco

1 product

Telepresence Tc Software

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Cisco Telepresence Tc Software	Version 6.0.0-cucm
Cisco Telepresence Tc Software	Version 6.0.0
Cisco Telepresence Tc Software	Version 6.0.1-cucm
Cisco Telepresence Tc Software	Version 6.0.1
Cisco Telepresence Tc Software	Version 6.0.2
Cisco Telepresence Tc Software	Version 6.0_base
Cisco Telepresence Tc Software	Version 6.1.0-cucm
Cisco Telepresence Tc Software	Version 6.1.0
Cisco Telepresence Tc Software	Version 6.1.1-cucm
Cisco Telepresence Tc Software	Version 6.1.1
Cisco Telepresence Tc Software	Version 6.1.2-cucm
Cisco Telepresence Tc Software	Version 6.1.2
Cisco Telepresence Tc Software	Version 6.1_base
Cisco Telepresence Tc Software	Version 6.3_base