https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 21:45:50 +0000 https://db.gcve.eu/vuln/bdu:2026-01768 bdu:2026-01768 https://db.gcve.eu/vuln/bdu:2026-01768 https://db.gcve.eu/vuln/cve-2025-20330 <p><strong>Affected:</strong> Cisco Unified Communications Manager IM and Presence Service</p> <p>A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM &amp;amp; Presence Service (Unified CM IM&amp;amp;P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> <p><strong>Affected:</strong> Cisco Unified Communications Manager IM and Presence Service</p> <p>A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM &amp;amp; Presence Service (Unified CM IM&amp;amp;P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> https://db.gcve.eu/vuln/cve-2025-20330