Lucene search

[email protected]NVD:CVE-2007-2832

HistoryMay 24, 2007 - 2:30 a.m.

CVE-2007-2832

2007-05-2402:30:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.

Affected configurations

Nvd

Node

ciscocall_managerMatch3.3

ciscocall_managerMatch3.3\(3\)

ciscocall_managerMatch3.3\(3\)es61

ciscocall_managerMatch3.3\(4\)es25

ciscocall_managerMatch3.3\(5\)

ciscocall_managerMatch3.3\(5\)es30

ciscocall_managerMatch3.3\(5\)sr1

ciscocall_managerMatch3.3\(5\)sr2

ciscocall_managerMatch4.1

ciscocall_managerMatch4.1\(2\)es33

ciscocall_managerMatch4.1\(2\)es55

ciscocall_managerMatch4.1\(3\)es07

ciscocall_managerMatch4.1\(3\)es32

ciscocall_managerMatch4.1\(3\)sr1

ciscocall_managerMatch4.1\(3\)sr2

ciscocall_managerMatch4.1\(3\)sr3

ciscocall_managerMatch4.2\(3\)

ciscocall_managerMatch4.2\(3\)sr1

ciscocall_managerMatch4.3\(1\)

VendorProductVersionCPE
ciscocall_manager3.3cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*
ciscocall_manager3.3(3)cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:*
ciscocall_manager3.3(3)es61cpe:2.3:h:cisco:call_manager:3.3\(3\)es61:*:*:*:*:*:*:*
ciscocall_manager3.3(4)es25cpe:2.3:h:cisco:call_manager:3.3\(4\)es25:*:*:*:*:*:*:*
ciscocall_manager3.3(5)cpe:2.3:h:cisco:call_manager:3.3\(5\):*:*:*:*:*:*:*
ciscocall_manager3.3(5)es30cpe:2.3:h:cisco:call_manager:3.3\(5\)es30:*:*:*:*:*:*:*
ciscocall_manager3.3(5)sr1cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:*:*:*:*:*:*:*
ciscocall_manager3.3(5)sr2cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2:*:*:*:*:*:*:*
ciscocall_manager4.1cpe:2.3:h:cisco:call_manager:4.1:*:*:*:*:*:*:*
ciscocall_manager4.1(2)es33cpe:2.3:h:cisco:call_manager:4.1\(2\)es33:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	call_manager	3.3	cpe:2.3:h:cisco:call_manager:3.3:::::::*
cisco	call_manager	3.3(3)	cpe:2.3:h:cisco:call_manager:3.3\(3\):::::::*
cisco	call_manager	3.3(3)es61	cpe:2.3:h:cisco:call_manager:3.3\(3\)es61:::::::*
cisco	call_manager	3.3(4)es25	cpe:2.3:h:cisco:call_manager:3.3\(4\)es25:::::::*
cisco	call_manager	3.3(5)	cpe:2.3:h:cisco:call_manager:3.3\(5\):::::::*
cisco	call_manager	3.3(5)es30	cpe:2.3:h:cisco:call_manager:3.3\(5\)es30:::::::*
cisco	call_manager	3.3(5)sr1	cpe:2.3:h:cisco:call_manager:3.3\(5\)sr1:::::::*
cisco	call_manager	3.3(5)sr2	cpe:2.3:h:cisco:call_manager:3.3\(5\)sr2:::::::*
cisco	call_manager	4.1	cpe:2.3:h:cisco:call_manager:4.1:::::::*
cisco	call_manager	4.1(2)es33	cpe:2.3:h:cisco:call_manager:4.1\(2\)es33:::::::*

Rows per page:

1-10 of 191

References

marc.info/?l=full-disclosure&m=117993122727006&w=2

secunia.com/advisories/25377

www.cisco.com/en/US/products/products_security_response09186a0080849272.html

www.osvdb.org/35337

www.scip.ch/cgi-bin/smss/showadvf.pl?id=2977

www.securityfocus.com/bid/24119

www.securitytracker.com/id?1018105

www.vupen.com/english/advisories/2007/1922

exchange.xforce.ibmcloud.com/vulnerabilities/34465

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Related for NVD:CVE-2007-2832

cvelist1 exploitdb1 cve1 prion1 cisco1