CVE-2007-1467

Cisco Secure Access Control Server - Cross-Site Scripting via PreSearch.html Text Field

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/462932/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2437
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24499
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33024
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017778
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/462944/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22982
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0973

Scores

EPSS 0.0119
EPSS Percentile 64.8%

Details

Status published
Products (26)
cisco/acs_solution_engine 4.1 (2 CPE variants)
cisco/call_manager
cisco/ciscoworks
cisco/ip_communicator
cisco/meetingplace
cisco/network_analysis_module
cisco/security_device_manager
cisco/unified_meetingplace
cisco/unified_meetingplace_express
cisco/unified_personal_communicator
... and 16 more
Published Mar 16, 2007
Tracked Since Feb 18, 2026