3.5

CVE-2007-1467

EPSS 1.19%
Veröffentlicht 16.03.2007 21:19:00
Zuletzt bearbeitet 16.06.2026 22:37:38
Erkennungen
Login

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Acs Solution Engine Version 4.1

Cisco ≫ Acs Solution Engine Version 4.1 Edition windows

Cisco ≫ Ciscoworks

Cisco ≫ Ip Communicator

Cisco ≫ Meetingplace

Cisco ≫ Security Device Manager

Cisco ≫ Unified Meetingplace

Cisco ≫ Unified Meetingplace Express

Cisco ≫ Unified Personal Communicator

Cisco ≫ Unified Video Advantage

Cisco ≫ Unified Videoconferencing

Cisco ≫ Unified Videoconferencing Manager

Cisco ≫ Vpn Client Version 3.5.1 Edition linux

Cisco ≫ Vpn Client Version 3.5.1 Edition solaris

Cisco ≫ Vpn Client Version 3.5.2 Edition linux

Cisco ≫ Vpn Client Version 3.5.2 Edition mac_os_x

Cisco ≫ Vpn Client Version 3.5.2 Edition solaris

Cisco ≫ Vpn Client Version 3.5.2b Edition linux

Cisco ≫ Vpn Client Version 3.5.2b Edition mac_os_x

Cisco ≫ Vpn Client Version 3.5.2b Edition solaris

Cisco ≫ Vpn Client Version 3.5.4 Edition linux

Cisco ≫ Vpn Client Version 3.5.4 Edition mac_os_x

Cisco ≫ Vpn Client Version 3.5.4 Edition solaris

Cisco ≫ Vpn Client Version 3.6 Edition linux

Cisco ≫ Vpn Client Version 3.6 Edition mac_os_x

Cisco ≫ Vpn Client Version 3.6 Edition solaris

Cisco ≫ Vpn Client Version 3.6.1 Edition linux

Cisco ≫ Vpn Client Version 3.6.1 Edition mac_os_x

Cisco ≫ Vpn Client Version 3.6.1 Edition solaris

Cisco ≫ Vpn Client Version 4.0.2a Edition mac_os_x

Cisco ≫ Vpn Client Version 4.0.2a Edition solaris

Cisco ≫ Vpn Client Version 4.0.2c Edition mac_os_x

Cisco ≫ Vpn Client Version 4.0.2c Edition solaris

Cisco ≫ Vpn Client Version 4.8.1 Edition windows

Cisco ≫ Wan Manager

Cisco ≫ Wireless Lan Controllers

Cisco ≫ Wireless Lan Solution Engine

Cisco ≫ Call Manager

Cisco ≫ Network Analysis Module

Cisco ≫ Wireless Control System Version 4.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.64

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/24499

http://securityreason.com/securityalert/2437

http://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.html

Vendor Advisory

http://www.securityfocus.com/archive/1/462932/100/0/threaded

http://www.securityfocus.com/archive/1/462944/100/0/threaded

http://www.securityfocus.com/bid/22982

http://www.securitytracker.com/id?1017778

http://www.vupen.com/english/advisories/2007/0973

https://exchange.xforce.ibmcloud.com/vulnerabilities/33024

https://nvd.nist.gov/vuln/detail/CVE-2007-1467

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1467

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1467

EUVD