Test ID:	1.3.6.1.4.1.25623.1.0.107074
Category:	CISCO
Title:	Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Summary:	Multiple vulnerabilities in the web framework code of the Cisco Prime;Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS);attack against the user of the web interface of the affected system.
Description:	Summary: Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. Vulnerability Insight: The vulnerability is due to insufficient input validation of some parameters passed to the web server. Vulnerability Impact: An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting malicious code. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Affected Software/OS: Cisco Prime Collaboration Provisioning version 10.6.0 is vulnerable. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6451 BugTraq ID: 93917 http://www.securityfocus.com/bid/93917 http://www.securitytracker.com/id/1037112
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.