Vulnerabilities > Improper Neutralization of Invalid Characters in Identifiers in Web Pages

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-08	CVE-2025-20166	A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. network low complexity CWE-86	5.4
2025-01-08	CVE-2025-20167	A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. network low complexity CWE-86	5.4
2025-01-08	CVE-2025-20168	A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. network low complexity CWE-86	5.4