XSS in Cisco Call_manager
CVE-2007-4633
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arb…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Call_manager — versions 3.3\(5\)sr1, 3.3\(5\)sr2, 3.3\(5\)sr2a
- Cisco Unified_communications_manager — versions 4.2.3sr2, 4.2.3sr2b
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)