XSS in Cisco Unified Meetingplace
CVE-2009-0743
Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (55.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_meetingplace — versions 6.0, 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)