CVE-2015-6255: Cisco Unified Web And E-Mail Interaction Manager

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051.

Affected products

• Cisco Unified Web And E-Mail Interaction Manager: version 9.0(2) only

Published 2015-08-19. Last modified 2026-06-17.