CVE-2013-3440

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-07-23 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.

Affected products

Cisco Unified Operations Manager: all versions

References

http://osvdb.org/95584
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440
http://tools.cisco.com/security/center/viewAlert.x?alertId=30175
http://www.securityfocus.com/bid/61414
http://www.securitytracker.com/id/1028819
http://osvdb.org/95584
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3440
http://tools.cisco.com/security/center/viewAlert.x?alertId=30175
http://www.securityfocus.com/bid/61414
http://www.securitytracker.com/id/1028819

Get alerted when CVE-2013-3440 or the next vulnerability affects your stack