CVE-2021-34760 | THREATINT

Assigner	cisco
Reserved	2021-06-15
Published	2021-10-21
Updated	2024-11-07

Description

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data in a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

MEDIUM: 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Product status

Any version

affected

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tms-xss-CwjZJSQc (20211020 Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability) vendor-advisory

cve.org CVE-2021-34760

nvd.nist.gov CVE-2021-34760

Download JSON

https://cve.threatint.com/CVE/CVE-2021-34760

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.