Vulnerability in Cisco Call_manager
CVE-2006-3109
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern paramete…
EPSS: 0.137 (96.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Call_manager — versions 3.3, 3.3\(3\), 3.3\(3\)es61
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2006-3109?
- CVE-2006-3109 is a vulnerability in Cisco Call_manager. Published 2006-06-21.
- Is CVE-2006-3109 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.