Lucene search

K
cve[email protected]CVE-2009-0743
HistoryFeb 27, 2009 - 5:30 p.m.

CVE-2009-0743

2009-02-2717:30:09
CWE-79
web.nvd.nist.gov
27
cve-2009-0743
cross-site scripting
xss vulnerability
cisco unified meetingplace
web conferencing

5.5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

45.3%

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.

Affected configurations

NVD
Node
ciscounified_meetingplaceMatch6.0
OR
ciscounified_meetingplaceMatch7.0

5.5 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

45.3%

Related for CVE-2009-0743