Details of VAR-201305-0273

ID

VAR-201305-0273

CVE

CVE-2013-1158

TITLE

Cisco Prime Central for Hosted Collaboration Solution Vulnerable to cross-site scripting

Trust: 0.8

sources: JVNDB: JVNDB-2013-002539

DESCRIPTION

Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397. Vendors have confirmed this vulnerability Bug ID CSCud54397 It is released as.By any third party through unspecified parameters Web Script or HTML May be inserted. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. This issue is being tracked by Cisco Bug ID CSCud54397. IBM Tivoli Monitoring (ITM) is a set of system monitoring software developed by IBM Corporation in the United States. The software supports detection of system bottlenecks and potential problems, performance monitoring of essential system resources, automatic recovery from critical situations, and more

Trust: 1.98

sources: NVD: CVE-2013-1158 // JVNDB: JVNDB-2013-002539 // BID: 59635 // VULHUB: VHN-61160

AFFECTED PRODUCTS

vendor:	cisco	model:	prime central for hosted collaboration solution	scope:	eq	version:	-	Trust: 1.6
vendor:	cisco	model:	prime central for hcs assurance	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	prime central for hosted collaboration solution	scope:	eq	version:	0	Trust: 0.3

sources: BID: 59635 // JVNDB: JVNDB-2013-002539 // CNNVD: CNNVD-201305-009 // NVD: CVE-2013-1158

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-1158
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-1158
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201305-009
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-61160
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-1158
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-61160
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-61160 // JVNDB: JVNDB-2013-002539 // CNNVD: CNNVD-201305-009 // NVD: CVE-2013-1158

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.9

sources: VULHUB: VHN-61160 // JVNDB: JVNDB-2013-002539 // NVD: CVE-2013-1158

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201305-009

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201305-009

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-002539

PATCH

title:	Cisco Prime Central for Hosted Collaboration Solution ITM Help Menus Cross-Site Scripting Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1158	Trust: 0.8
title:	29145	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=29145	Trust: 0.8

sources: JVNDB: JVNDB-2013-002539

EXTERNAL IDS

db:	NVD	id:	CVE-2013-1158	Trust: 2.8
db:	JVNDB	id:	JVNDB-2013-002539	Trust: 0.8
db:	CNNVD	id:	CNNVD-201305-009	Trust: 0.7
db:	CISCO	id:	20130430 CISCO PRIME CENTRAL FOR HOSTED COLLABORATION SOLUTION ITM HELP MENUS CROSS-SITE SCRIPTING VULNERABILITY	Trust: 0.6
db:	BID	id:	59635	Trust: 0.4
db:	VULHUB	id:	VHN-61160	Trust: 0.1

sources: VULHUB: VHN-61160 // BID: 59635 // JVNDB: JVNDB-2013-002539 // CNNVD: CNNVD-201305-009 // NVD: CVE-2013-1158

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-1158	Trust: 2.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1158	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1158	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-61160 // BID: 59635 // JVNDB: JVNDB-2013-002539 // CNNVD: CNNVD-201305-009 // NVD: CVE-2013-1158

CREDITS

Cisco

Trust: 0.3

sources: BID: 59635

SOURCES

db:	VULHUB	id:	VHN-61160
db:	BID	id:	59635
db:	JVNDB	id:	JVNDB-2013-002539
db:	CNNVD	id:	CNNVD-201305-009
db:	NVD	id:	CVE-2013-1158

LAST UPDATE DATE

2025-04-11T22:59:11.219000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-61160	date:	2013-05-01T00:00:00
db:	BID	id:	59635	date:	2013-04-30T00:00:00
db:	JVNDB	id:	JVNDB-2013-002539	date:	2013-05-02T00:00:00
db:	CNNVD	id:	CNNVD-201305-009	date:	2022-03-21T00:00:00
db:	NVD	id:	CVE-2013-1158	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-61160	date:	2013-05-01T00:00:00
db:	BID	id:	59635	date:	2013-04-30T00:00:00
db:	JVNDB	id:	JVNDB-2013-002539	date:	2013-05-02T00:00:00
db:	CNNVD	id:	CNNVD-201305-009	date:	2013-05-02T00:00:00
db:	NVD	id:	CVE-2013-1158	date:	2013-05-01T12:00:08.503