Vulnerability record · CVE-2011-0959 · published 20 May 2011

CVE-2011-0959: Cisco unified operations manager cross-site scripting vulnerability

Cisco · Unified Operations Manager

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the (3) cmd or (4) group parameter to iptm/eventmon, the (5) clusterName or (6) deviceName parameter to iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp, or the (7) ccmName or (8) clusterName parameter to iptm/logicalTopo.do, aka Bug ID CSCtn61716.

4.3 CVSS 2.0 Medium EPSS 21% · top 2.5% CWE-79 · Cross-site scripting

4.3CVSS 2.0 base score

21%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References, 6 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Unified Operations Manager Cisco

References

Link	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html	Exploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23085	Vendor Advisory
http://www.exploit-db.com/exploits/17304	Exploit
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf	ExploitURL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67521
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0371.html	Exploit
http://tools.cisco.com/security/center/viewAlert.x?alertId=23085	Vendor Advisory
http://www.exploit-db.com/exploits/17304	Exploit
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf	ExploitURL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/67521

Track CVE-2011-0959 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-2738Cisco unified service monitor vulnerabilityMultiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN…EPSS 11%19 Sep 2011 10.0CVE-2010-3036Ciscoworks common services memory buffer overflow vulnerabilityMultiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote at…EPSS 6.0%29 Oct 2010 10.0CVE-2009-1161Ciscoworks common services path traversal vulnerabilityDirectory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Uni…EPSS 13%21 May 2009 7.5CVE-2011-0960Cisco unified operations manager sql injection vulnerabilityMultiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands…EPSS 3.8%20 May 2011 6.5CVE-2013-3437Cisco unified operations manager sql injection vulnerabilitySQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary …EPSS 1.0%23 Jul 2013 5.0CVE-2013-5488Cisco prime lan management solution improper input validation vulnerabilityCisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified…EPSS 1.6%12 Sep 2013 4.3CVE-2013-3439Cisco unified operations manager cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a cra…EPSS 1.8%23 Jul 2013 4.3CVE-2013-3440Cisco unified operations manager cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to…EPSS 1.2%23 Jul 2013

Source: NIST National Vulnerability Database (record CVE-2011-0959), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.