CVE-2013-5482

Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCug77823.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2013-09-13

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Prime Lan Management Solution (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5482