发布日期：2020-07-02
更新日期：2020-07-16

受影响系统：

Cisco Unified Communications Manager 12.5(1)
Cisco Unified Communications Manager 11.5(1)
Cisco Unified Communications Manager 10.5(2)
Cisco Unity Connection 12.5(1)
Cisco Unity Connection 12.0(1)
Cisco Unity Connection 11.5(1)
Cisco Unity Connection 10.5(2)
Cisco Unified Communications Manager IM & Presence Servi 12.5(1)
Cisco Unified Communications Manager IM & Presence Servi 12.0(1)
Cisco Unified Communications Manager IM & Presence Servi 11.5(1)
Cisco Unified Communications Manager IM & Presence Servi 10.5(2)
Cisco Unified Communications Manager Session Management Edition 12.5(1)
Cisco Unified Communications Manager Session Management Edition 12.0(1)
Cisco Unified Communications Manager Session Management Edition 11.5(1)
Cisco Unified Communications Manager Session Management Edition 10.5(2)

描述：

---

CVE(CAN) ID: CVE-2020-3282

Cisco Unity Connection是思科提供的一套语音留言平台。Cisco Unified Communications Manager是思科提供的一款基于IP的通信系统。Cisco Unified Communications Manager Session Management Edition是Cisco Unified Communications Manager的会话管理版。Cisco Unified Communications Manager IM and Presence中提供基于本地标准的双协议企业即时消息(IM)和基于网络的在线状态。这些思科产品中存在跨站脚本漏洞。该漏洞源于软件的Web界面未充分验证用户提供的输入数据。攻击者可通过诱使用户单击特制的链接利用该漏洞执行任意脚本代码或访问基于浏览器的敏感信息。以下产品及版本受到影响：Cisco Unified Communications Manager 10.5(2)版本、11.5(1)版本、12.0(1)版本和12.5(1)版本；Cisco Unified Communications Manager Session Management Edition 10.5(2)版本、11.5(1)版本、12.0(1)版本和12.5(1)版本；Cisco Unified Communications Manager IM ＆ Presence Service 10.5(2)版本、11.5(1)版本、12.0(1)版本和12.5(1)版本；Cisco Unity Connection 10.5(2)版本、11.5(1)版本、12.0(1)版本和12.5(1)版本。

<*链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-cuc-imp-xss-OWuS
*>

建议：

---

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-cucm-cuc-imp-xss-OWuSYAp）以及相应补丁:
cisco-sa-cucm-cuc-imp-xss-OWuSYAp：Cisco Unified Communications Products Cross-Site Scripting Vulnerability (CVE-2020-3282)
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-cuc-imp-xss-OWuS

浏览次数：894
严重程度：0（网友投票）