Lucene search

[email protected]CVE-2007-4633

HistoryAug 31, 2007 - 11:17 p.m.

CVE-2007-4633

2007-08-3123:17:00

CWE-79

[email protected]

web.nvd.nist.gov

cisco

callmanager

unified communications manager

xss

vulnerabilities

nvd

cve-2007-4633

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.

CPENameOperatorVersion
cisco:call_managercisco call managereq4.2\(2\)
cisco:unified_communications_managercisco unified communications managereq4.2.3sr2
cisco:call_managercisco call managereq4.3\(1\)sr1
cisco:call_managercisco call managereq3.3\(5\)sr2
cisco:call_managercisco call managereq4.3\(1\)
cisco:call_managercisco call managereq4.1\(3\)sr1
cisco:call_managercisco call managereq4.1
cisco:call_managercisco call managereq3.3\(5\)sr2a
cisco:call_managercisco call managereq4.1\(3\)sr2
cisco:call_managercisco call managereq4.2

CPE	Name	Operator	Version
cisco:call_manager	cisco call manager	eq	4.2\(2\)
cisco:unified_communications_manager	cisco unified communications manager	eq	4.2.3sr2
cisco:call_manager	cisco call manager	eq	4.3\(1\)sr1
cisco:call_manager	cisco call manager	eq	3.3\(5\)sr2
cisco:call_manager	cisco call manager	eq	4.3\(1\)
cisco:call_manager	cisco call manager	eq	4.1\(3\)sr1
cisco:call_manager	cisco call manager	eq	4.1
cisco:call_manager	cisco call manager	eq	3.3\(5\)sr2a
cisco:call_manager	cisco call manager	eq	4.1\(3\)sr2
cisco:call_manager	cisco call manager	eq	4.2

Rows per page:

1-10 of 191

References

secunia.com/advisories/26641

securitytracker.com/id?1018624

www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml

www.securityfocus.com/bid/25480

www.vupen.com/english/advisories/2007/3010

exchange.xforce.ibmcloud.com/vulnerabilities/36325

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for CVE-2007-4633

prion1 cvelist1 cisco1