CVE-2007-1467
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express,…
Does this matter?
Lower severity and a low EPSS score (1.19%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.19% probability · 66th percentile
- CISA KEV
- Not listed
- Affected
- cisco/acs solution engine · cisco/ciscoworks · cisco/ip communicator · cisco/meetingplace · cisco/security device manager · cisco/unified meetingplace · cisco/unified meetingplace express · cisco/unified personal communicator · cisco/unified video advantage · cisco/unified videoconferencing · cisco/unified videoconferencing manager · cisco/vpn client · cisco/wan manager · cisco/wireless lan controllers · cisco/wireless lan solution engine · cisco/call manager · cisco/network analysis module · cisco/wireless control system
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/24499
- http://securityreason.com/securityalert/2437
- http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/462932/100/0/threaded
- http://www.securityfocus.com/archive/1/462944/100/0/threaded
- http://www.securityfocus.com/bid/22982
- http://www.securitytracker.com/id?1017778
- http://www.vupen.com/english/advisories/2007/0973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33024
- http://secunia.com/advisories/24499
- http://securityreason.com/securityalert/2437
- http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/462932/100/0/threaded
- http://www.securityfocus.com/archive/1/462944/100/0/threaded
- http://www.securityfocus.com/bid/22982
- http://www.securitytracker.com/id?1017778
- http://www.vupen.com/english/advisories/2007/0973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33024
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.