CVE-2007-4284

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-09 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) Success Template (STPL) and (2) Failure Template (FTPL) parameters, which are not properly handled in an error message.

Affected products

Cisco Meetingplace Web Confrencing: through 5.3\(235\)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065134.html
http://secunia.com/advisories/26376
http://securityreason.com/securityalert/2990
http://www.cisco.com/en/US/products/products_security_response09186a008089969e.html
http://www.securityfocus.com/archive/1/475840/100/0/threaded
http://www.securityfocus.com/archive/1/475845/100/0/threaded
http://www.securityfocus.com/bid/25237
http://www.securitytracker.com/id?1018537
http://www.vupen.com/english/advisories/2007/2815
https://exchange.xforce.ibmcloud.com/vulnerabilities/35871
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065134.html
http://secunia.com/advisories/26376

Get alerted when CVE-2007-4284 or the next vulnerability affects your stack