CVE-2021-1599

A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface, access sensitive, browser-based information, or cause an affected device to reboot under certain conditions.

• CWE-79
• CWE-79

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-xss-yvE6L8ZqPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-xss-yvE6L8ZqPatch, Vendor Advisory

Published

Jul 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1593A vulnerability in Cisco Packet Tracer for Windows could all…7.3
• CVE-2021-1594A vulnerability in the REST API of Cisco Identity Services E…8.1
• CVE-2021-1595Multiple vulnerabilities in the Link Layer Discovery Protoco…6.5
• CVE-2021-1596Multiple vulnerabilities in the Link Layer Discovery Protoco…6.5
• CVE-2021-1597Multiple vulnerabilities in the Link Layer Discovery Protoco…6.5
• CVE-2021-1598Multiple vulnerabilities in the Link Layer Discovery Protoco…6.5
• CVE-2021-1600Multiple vulnerabilities in Cisco Intersight Virtual Applian…8.3
• CVE-2021-1601Multiple vulnerabilities in Cisco Intersight Virtual Applian…8.3
• CVE-2021-1602A vulnerability in the web-based management interface of Cis…9.8
• CVE-2021-1603Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1604Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1605Multiple vulnerabilities in the web-based management interfa…4.8