XSS in Cisco Ciscoworks Server
CVE-2007-5582
Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ciscoworks_server
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)