VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 8, 2016· Updated Jun 17, 2026

CVE-2016-1474

CVE-2016-1474

Description

Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuw65846, a different vulnerability than CVE-2015-6434.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cisco Systems, Inc./Prime Infrastructure2 versions
    cpe:2.3:a:cisco:prime_infrastructure:2.2\(2\):*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:prime_infrastructure:2.2\(2\):*:*:*:*:*:*:*
    • (no CPE)range: =2.2(2)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.