CVE-2013-1160
https://notcve.org/view.php?id=CVE-2013-1160
Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743. Vulnerabilidad XSS en los menús web de OpenView en Cisco Prime Central para Hosted Collaboration Solution permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un parámetro no especificado. Aka Bug ID CSCud56743. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1160 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2013-1135
https://notcve.org/view.php?id=CVE-2013-1135
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service (CPU consumption and monitoring outage) via malformed TLS messages to TCP port (1) 9043 or (2) 9443, aka Bug ID CSCuc07155. Cisco Prime Central para la Hosted Collaboration Solution (HCS) Assrance v8.6 y v9.0 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y el corte de monitorización) a través de mensajes malformados TLS en el puerto TCP (1) 9043 o (2) 9443, también conocido como Bug ID CSCuc07155. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-hcs http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1135 • CWE-20: Improper Input Validation •