CVE-2009-0743: XSS

Published Feb 27, 2009

Updated

Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.

Affected Software

2 affected components

Cisco Unified MeetingPlace=6.0

Cisco Unified MeetingPlace=7.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html

Event History

Feb 27, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0743?

CVE-2009-0743 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2009-0743?

To fix CVE-2009-0743, you should upgrade to Cisco Unified MeetingPlace Web Conferencing version 6.0(517.0) or 7.0(2) or later.

Who is affected by CVE-2009-0743?

CVE-2009-0743 affects remote authenticated users of Cisco Unified MeetingPlace Web Conferencing versions 6.0 before 6.0(517.0) and 7.0 before 7.0(2).

What types of attacks can be executed due to CVE-2009-0743?

Attackers can exploit CVE-2009-0743 to inject arbitrary web script or HTML through the E-mail Address field on the edit account page.

Is CVE-2009-0743 possibly exploitative in a corporate environment?

Yes, CVE-2009-0743 poses a risk in corporate environments where Cisco Unified MeetingPlace is utilized, potentially leading to session hijacking or data theft.