CVEvulnerability
CVE-2007-5582
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• cisco ciscoworks server (<= 2.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/27902 secunia.com
- http://securityreason.com/securityalert/3449 securityreason.com
- http://securitytracker.com/id?1019043 securitytracker.com
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289 tools.cisco.com
- http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml Patch
- http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/ www.liquidmatrix.org
- http://www.securityfocus.com/archive/1/484609/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26708 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4102 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38862 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27902 secunia.com
- http://securityreason.com/securityalert/3449 securityreason.com
- http://securitytracker.com/id?1019043 securitytracker.com
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289 tools.cisco.com
- http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml Patch
- http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/ www.liquidmatrix.org
- http://www.securityfocus.com/archive/1/484609/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26708 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4102 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38862 exchange.xforce.ibmcloud.com