CiscoWorks Common Services Directory Traversal and Cross Site Scripting
Description
Two vulnerabilities have been identified in Cisco CiscoWorks Common Services, which could be exploited by attackers to gain knowledge of sensitive information.
The first issue is caused by an input validation error in the CiscoWorks Homepage Auditing component, which could allow directory traversal attacks.
The second vulnerability is caused by an input validation error in the Framework Help Servlet, which could allow cross site scripting attacks.
Vulnerable Products
Vulnerable Software: CiscoWorks Common Services version 3.3 and prior
