CVE-2019-1702

CVE-2019-1702 describes multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email, specifically affecting version 11.6(1). These flaws stem from insufficient input validation, allowing an unauthenticated, remote attacker to inject malicious code. The vulnerability has a CVSSv3 score of 6.1 (Medium), indicating a low attack complexity where user interaction is required (e.g., clicking a crafted link or opening a malicious chat window). A successful exploit could lead to arbitrary script execution within the affected interface or access to sensitive browser-based information. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.