CVE-2015-0703 — Cross-site Scripting in Cisco Unified Meetingplace

CWE-79 — Cross-site Scripting6 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 50.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Meetingplace
Timeline
PublishedApr 21
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-cx8v-w8g2-4492: Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8↗2022-05-17
▶
CVEList
CVE-2015-0703: Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8↗2015-04-21
▶

📋Vendor Advisories

1
Cisco
Cisco Unified MeetingPlace Administrative Web Interface Reflected Cross-Site Scripting Vulnerability↗2015-04-20
▶

💬Community

1
HackerOne
Divide-and-conquer session key recovery in SSLv2 (CVE-2016-0703)↗2016-06-01
▶
CVE-2015-0703 — Cross-site Scripting in Cisco | cvebase