CVEvulnerability
CVE-2009-0743
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-02-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.
Affected configurations
• cisco unified meetingplace 6.0
• cisco unified meetingplace 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/501251/30/0/threaded Exploit
- http://www.securityfocus.com/bid/33915 www.securityfocus.com
- http://www.securitytracker.com/id?1021778 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48965 exchange.xforce.ibmcloud.com
- http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/501251/30/0/threaded Exploit
- http://www.securityfocus.com/bid/33915 www.securityfocus.com
- http://www.securitytracker.com/id?1021778 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48965 exchange.xforce.ibmcloud.com