CVE-2013-5482

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCug77823.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-54834.3Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HCVE-2013-548610.0Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1)CVE-2013-54877.8DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecifCVE-2013-54885.0Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and CiscCVE-2013-54895.0The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtaCVE-2013-54907.8Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entityCVE-2013-54925.0administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-servCVE-2013-54936.8The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access reCVE-2013-54946.8Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlaceCVE-2013-54954.3Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackerCVE-2013-54966.3Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reloCVE-2013-54974.3The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, whi
CVE-2013-5482: Medium severity, CVSS 4.3 | Vulnix