CVE-2016-1451
MEDIUMCisco Meeting Server 1.7-1.9 - Cross-Site Scripting via Web Management Interface Parameters
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ms
Scores
CVSS v3
6.1
EPSS
0.0077
EPSS Percentile
51.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (3)
cisco/meeting_server
1.7_base
cisco/meeting_server
1.8_base
cisco/meeting_server
1.9_base
Published
Jul 15, 2016
Tracked Since
Feb 18, 2026