{"id":"CVE-2016-1354","aliases":["EUVD-2016-2453","GHSA-mvh3-4pvm-6fvj"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8...","description":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00773,"percentile":0.55973,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2016-03-03T15:00:00Z","modified":"2026-06-17T00:41:46Z","products":[{"vendor":"cisco","product":"unified_communications_domain_manager"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-cucdm","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1354"},{"url":"https://github.com/advisories/GHSA-mvh3-4pvm-6fvj"}],"sources":{"cve":[{"id":"CVE-2016-1354","description":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.","status":"published","published":"2016-03-03T15:00:00Z","modified":"2024-08-05T22:55:14.155Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-2453","description":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.","status":"published","published":"2016-03-03T15:00:00Z","modified":"2024-08-05T22:55:14Z","updated_at":"2026-11-03T02:22:57.428811Z"}],"ghsa":[{"id":"GHSA-mvh3-4pvm-6fvj","title":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8...","description":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.","status":"published","published":"2022-05-17T03:58:34Z","modified":"2023-01-28T05:00:49Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:43:25.46952Z"}],"nvd":[{"id":"CVE-2016-1354","description":"Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.","status":"published","published":"2016-03-03T15:59:00.117Z","modified":"2026-06-17T00:41:46.203Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:22.479119Z"}]}}