CVE Vulnerability

CVE-2007-4284

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065134.html
http://www.cisco.com/en/US/products/products_security_response09186a008089969e.html
http://www.securityfocus.com/bid/25237
http://www.securitytracker.com/id?1018537
http://secunia.com/advisories/26376
http://securityreason.com/securityalert/2990
http://www.vupen.com/english/advisories/2007/2815
https://exchange.xforce.ibmcloud.com/vulnerabilities/35871
http://www.securityfocus.com/archive/1/475845/100/0/threaded
http://www.securityfocus.com/archive/1/475840/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:cisco:meetingplace_web_confrencing:*:*:*:*:*:*:*:*
Information

Published : 2007-08-09 09:17

Updated : 2018-10-15 09:34

NVD link : CVE-2007-4284

Mitre link : CVE-2007-4284

Products Affected
No products.
CWE
NVD-CWE-Other