CVE-2021-34732: medium-severity vulnerability in Cisco Prime Collaboration Provisioning
Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1epss 0.8%
A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Cisco · Cisco Prime Collaboration ProvisioningRelated CVEs — Cisco Prime Collaboration Provisioning
In the same product, most dangerous first.
CVE-2018-15389—Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password VulnerabilityEPSS 1.5%CVE-2020-3193MEDIUMCisco Prime Collaboration Provisioning Information Disclosure VulnerabilityEPSS 1.1%CVE-2020-3184MEDIUMCisco Prime Collaboration Provisioning Software SQL Injection VulnerabilityEPSS 0.9%CVE-2020-3192MEDIUMCisco Prime Collaboration Provisioning Cross-Site Scripting VulnerabilityEPSS 0.8%