Vulnerabilities > CVE-2015-0599 - 7PK - Security Features vulnerability in Cisco Unified Computing System

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
cisco
CWE-254
NVD
Published: 2015-02-03
Updated: 2024-11-21

Summary

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuf50138.

Vulnerable Configurations

Part Description Count
Hardware
Cisco
1

Common Weakness Enumeration (CWE)

References