CVE-2007-1467 Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace,....
LowCVSS 3.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco acs solution engine | = 4.1 | No fix listed |
| ciscoworks | All versions | No fix listed |
| cisco ip communicator | All versions | No fix listed |
| cisco meetingplace | All versions | No fix listed |
| cisco security device manager | All versions | No fix listed |
| cisco unified meetingplace | All versions | No fix listed |
| cisco unified meetingplace express | All versions | No fix listed |
| cisco unified personal communicator | All versions | No fix listed |
| cisco unified video advantage | All versions | No fix listed |
| cisco unified videoconferencing | All versions | No fix listed |
| cisco unified videoconferencing manager | All versions | No fix listed |
| cisco vpn client | = 3.5.1 | No fix listed |
| cisco vpn client | = 3.5.2 | No fix listed |
| cisco vpn client | = 3.5.2b | No fix listed |
| cisco vpn client | = 3.5.4 | No fix listed |
| cisco vpn client | = 3.6 | No fix listed |
| cisco vpn client | = 3.6.1 | No fix listed |
| cisco vpn client | = 4.0.2a | No fix listed |
| cisco vpn client | = 4.0.2c | No fix listed |
| cisco vpn client | = 4.8.1 | No fix listed |
| cisco wan manager | All versions | No fix listed |
| cisco wireless lan controllers | All versions | No fix listed |
| cisco wireless lan solution engine | All versions | No fix listed |
| cisco call manager | All versions | No fix listed |
| cisco network analysis module | All versions | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless control system | = 4.0 | No fix listed |
References
- 24499 third-party-advisory
- 2437 third-party-advisory
- 20070315 Cross-Site Scripting Vulnerability in Online Help System vendor-advisory
- 20070315 XSS vulnerability in the online help system of several Cisco products mailing-list
- 20070315 Re: XSS vulnerability in the online help system of several Cisco products mailing-list
- 22982 vdb-entry
- 1017778 vdb-entry
- ADV-2007-0973 vdb-entry
- cisco-presearch-xss(33024) vdb-entry