Unscored severity · published Nov 8, 2007
CVE-2007-5581
Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName and (2) LastName parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UM
Unified Meetingplace · Cisco
through 5.4; 4.3.0.246; 4.3.0.246.5; 5; 5.0; 5.2; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5581
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5581
Vendor Advisory
http://secunia.com/advisories/26462
securitytracker.com
http://securitytracker.com/id?1018904
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sr-20071107-mp.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/26364
www.vupen.com
http://www.vupen.com/english/advisories/2007/3772
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38298
More from Unified Meetingplace
–
CVE-2015-4233
SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID…
–
CVE-2015-4214
Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050
–
CVE-2015-0764
Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603
–
CVE-2015-0763
Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL,…
–
CVE-2015-0762
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject…