Lucene search

MitreCVE-2007-4284

HistoryAug 09, 2007 - 9:17 p.m.

CVE-2007-4284

2007-08-0921:17:00

mitre

web.nvd.nist.gov

cve-2007-4284

xss

cisco unified meetingplace

web conferencing

mp 5.3.235.0

nvd

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.063

Percentile

93.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.

Affected configurations

Nvd

Node

ciscomeetingplace_web_confrencingRange≤5.3\(235\)

VendorProductVersionCPE
ciscomeetingplace_web_confrencing*cpe:2.3:a:cisco:meetingplace_web_confrencing:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	meetingplace_web_confrencing	*	cpe:2.3:a:cisco:meetingplace_web_confrencing::::::::

References

lists.grok.org.uk/pipermail/full-disclosure/2007-August/065134.html

secunia.com/advisories/26376

securityreason.com/securityalert/2990

www.cisco.com/en/US/products/products_security_response09186a008089969e.html

www.securityfocus.com/archive/1/475840/100/0/threaded

www.securityfocus.com/archive/1/475845/100/0/threaded

www.securityfocus.com/bid/25237

www.securitytracker.com/id?1018537

www.vupen.com/english/advisories/2007/2815

exchange.xforce.ibmcloud.com/vulnerabilities/35871

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.063

Percentile

93.7%

JSON

Related for CVE-2007-4284