VulnerabilityModified
CVE-2013-1123
Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.
MEDIUM 4.3EPSS 1.28%
Does this matter?
Lower severity and a low EPSS score (1.28%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.28% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/unified meetingplace
- Source
- psirt@cisco.com
References
- http://osvdb.org/90075
- http://secunia.com/advisories/52109Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28228Vendor Advisory
- http://www.securityfocus.com/bid/57885
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81986
- http://osvdb.org/90075
- http://secunia.com/advisories/52109Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=28228Vendor Advisory
- http://www.securityfocus.com/bid/57885
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81986
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.