CVE-2013-1171

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-01 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882, CSCue38881, CSCue38872, CSCue38868, CSCue38866, CSCue38853, and CSCue14540.

Affected products

Cisco Connected Grid Network Management System: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1171
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1171

Get alerted when CVE-2013-1171 or the next vulnerability affects your stack