CVE-2007-5582

CiscoWorks Server < 2.6 - Cross-Site Scripting via Login Page

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (10)

Core 10

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1019043

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/4102

Various Sources x_refsource_misc

http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/484609/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/3449

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/38862

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26708

Patch vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml

Various Sources x_refsource_confirm

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27902

Scores

EPSS 0.0157

EPSS Percentile 72.8%

Details

CWE

CWE-79

Status published

Products (1)

cisco/ciscoworks_server < 2.6

Published Dec 15, 2007

Tracked Since Feb 18, 2026