CVE:CVE-2019-16008
CNNVD:CNNVD-202001-230
Cisco IP Phone 8800 Series和Cisco IP Phone 7800 Series都是美国思科（Cisco）公司的产品。Cisco IP Phone 8800 Series是一款8800系列的IP电话。Cisco IP Phone 7800 Series是一款7800系列IP电话。
Cisco IP Phone 6800、7800和8800 Series（使用Multiplatform Firmware Release 11.3(1)之前版本）中基于Web的GUI存在跨站脚本漏洞，该漏洞源于该GUI没有充分验证用户提交的输入。远程攻击者可通过诱使用户点击特制的链接利用该漏洞在该受影响界面的上下文中执行任意脚本代码或访问基于浏览器的敏感信息。
solution:Upgrade cisco ip_phone_6841_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_6851_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_6825_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_6861_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_6871_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_6821_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_7811_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_7821_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_7832_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_7841_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_7861_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8811_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8831_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8832_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8841_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8845_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8851_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8861_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\)); Upgrade cisco ip_phone_8865_firmware to a higher version than 11.3\(1\,and avoid the version (,11.3\(1\))