CVE-2009-0743

Cisco Unified MeetingPlace Web Conferencing <6.0(517.0)-7.0(2) - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/33915

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1021778

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/48965

Patch, Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html

Exploit mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/501251/30/0/threaded

Scores

EPSS 0.0090

EPSS Percentile 55.9%

Details

CWE

CWE-79

Status published

Products (2)

cisco/unified_meetingplace 6.0

cisco/unified_meetingplace 7.0

Published Feb 27, 2009

Tracked Since Feb 18, 2026