Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks和相关产品,Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC)和Wireless Control System (WCS)中的(1)PreSearch.html和(2)PreSearch.class文件存在多个跨站脚本攻击漏洞。远程攻击者可以借助搜索格式的文本字段,注入任意的web脚本或HTML。
Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks和相关产品,Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC)和Wireless Control System (WCS)中的(1)PreSearch.html和(2)PreSearch.class文件存在多个跨站脚本攻击漏洞。远程攻击者可以借助搜索格式的文本字段,注入任意的web脚本或HTML。