Details of VAR-201312-0459

ID

VAR-201312-0459

CVE

CVE-2013-6711

TITLE

Cisco WebEx Sales Center Cross-site scripting vulnerability in the product creation management page

Trust: 0.8

sources: JVNDB: JVNDB-2013-005560

DESCRIPTION

Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540. Cisco WebEx Sales Center Product creation (product-creation) Contains a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. This issue is being tracked by Cisco Bug ID CSCul25540. The solution supports the creation of personalized sales processes, online presentations, sales tracking and reporting, and more

Trust: 1.98

sources: NVD: CVE-2013-6711 // JVNDB: JVNDB-2013-005560 // BID: 64272 // VULHUB: VHN-66713

AFFECTED PRODUCTS

vendor:	cisco	model:	webex sales center	scope:	eq	version:	-	Trust: 1.6
vendor:	cisco	model:	webex sales center	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	webex sales center	scope:	eq	version:	0	Trust: 0.3

sources: BID: 64272 // JVNDB: JVNDB-2013-005560 // CNNVD: CNNVD-201312-269 // NVD: CVE-2013-6711

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-6711
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-6711
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201312-269
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-66713
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-6711
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-66713
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-66713 // JVNDB: JVNDB-2013-005560 // CNNVD: CNNVD-201312-269 // NVD: CVE-2013-6711

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.9

sources: VULHUB: VHN-66713 // JVNDB: JVNDB-2013-005560 // NVD: CVE-2013-6711

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201312-269

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201312-269

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-005560

PATCH

title:	Cisco WebEx Sales Center Reflected Cross-Site Scripting Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6711	Trust: 0.8
title:	32156	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=32156	Trust: 0.8

sources: JVNDB: JVNDB-2013-005560

EXTERNAL IDS

db:	NVD	id:	CVE-2013-6711	Trust: 2.8
db:	SECTRACK	id:	1029493	Trust: 1.1
db:	JVNDB	id:	JVNDB-2013-005560	Trust: 0.8
db:	CNNVD	id:	CNNVD-201312-269	Trust: 0.7
db:	CISCO	id:	20131212 CISCO WEBEX SALES CENTER REFLECTED CROSS-SITE SCRIPTING VULNERABILITY	Trust: 0.6
db:	BID	id:	64272	Trust: 0.4
db:	VULHUB	id:	VHN-66713	Trust: 0.1

sources: VULHUB: VHN-66713 // BID: 64272 // JVNDB: JVNDB-2013-005560 // CNNVD: CNNVD-201312-269 // NVD: CVE-2013-6711

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-6711	Trust: 2.0
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=32156	Trust: 1.7
url:	http://www.securitytracker.com/id/1029493	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-6711	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-6711	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-66713 // BID: 64272 // JVNDB: JVNDB-2013-005560 // CNNVD: CNNVD-201312-269 // NVD: CVE-2013-6711

CREDITS

Cisco

Trust: 0.3

sources: BID: 64272

SOURCES

db:	VULHUB	id:	VHN-66713
db:	BID	id:	64272
db:	JVNDB	id:	JVNDB-2013-005560
db:	CNNVD	id:	CNNVD-201312-269
db:	NVD	id:	CVE-2013-6711

LAST UPDATE DATE

2024-11-23T21:45:29.918000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-66713	date:	2016-09-16T00:00:00
db:	BID	id:	64272	date:	2013-12-12T00:00:00
db:	JVNDB	id:	JVNDB-2013-005560	date:	2013-12-18T00:00:00
db:	CNNVD	id:	CNNVD-201312-269	date:	2013-12-17T00:00:00
db:	NVD	id:	CVE-2013-6711	date:	2024-11-21T01:59:35.890

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-66713	date:	2013-12-14T00:00:00
db:	BID	id:	64272	date:	2013-12-12T00:00:00
db:	JVNDB	id:	JVNDB-2013-005560	date:	2013-12-18T00:00:00
db:	CNNVD	id:	CNNVD-201312-269	date:	2013-12-17T00:00:00
db:	NVD	id:	CVE-2013-6711	date:	2013-12-14T22:55:14.223