CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3109

Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.074

EPSS Ranking 91.2%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2006-3109

Cisco » Call Manager » Version: 3.3

cpe:2.3:h:cisco:call_manager:3.3
Cisco » Call Manager » Version: 3.3(3)

cpe:2.3:h:cisco:call_manager:3.3(3)
Cisco » Call Manager » Version: 3.3(3)es61

cpe:2.3:h:cisco:call_manager:3.3(3)es61
Cisco » Call Manager » Version: 3.3(4)es25

cpe:2.3:h:cisco:call_manager:3.3(4)es25
Cisco » Call Manager » Version: 3.3(5)

cpe:2.3:h:cisco:call_manager:3.3(5)
Cisco » Call Manager » Version: 3.3(5)es30

cpe:2.3:h:cisco:call_manager:3.3(5)es30
Cisco » Call Manager » Version: 3.3(5)sr1

cpe:2.3:h:cisco:call_manager:3.3(5)sr1
Cisco » Call Manager » Version: 3.3(5)sr2

cpe:2.3:h:cisco:call_manager:3.3(5)sr2
Cisco » Call Manager » Version: 4.1

cpe:2.3:h:cisco:call_manager:4.1
Cisco » Call Manager » Version: 4.1(2)es33

cpe:2.3:h:cisco:call_manager:4.1(2)es33
Cisco » Call Manager » Version: 4.1(2)es55

cpe:2.3:h:cisco:call_manager:4.1(2)es55
Cisco » Call Manager » Version: 4.1(3)es07

cpe:2.3:h:cisco:call_manager:4.1(3)es07
Cisco » Call Manager » Version: 4.1(3)es32

cpe:2.3:h:cisco:call_manager:4.1(3)es32
Cisco » Call Manager » Version: 4.1(3)sr1

cpe:2.3:h:cisco:call_manager:4.1(3)sr1
Cisco » Call Manager » Version: 4.1(3)sr2

cpe:2.3:h:cisco:call_manager:4.1(3)sr2
Cisco » Call Manager » Version: 4.1(3)sr3

cpe:2.3:h:cisco:call_manager:4.1(3)sr3
Cisco » Call Manager » Version: 4.2

cpe:2.3:h:cisco:call_manager:4.2
Cisco » Call Manager » Version: 4.2(1)

cpe:2.3:h:cisco:call_manager:4.2(1)
Cisco » Call Manager » Version: 4.2(2)

cpe:2.3:h:cisco:call_manager:4.2(2)
Cisco » Call Manager » Version: 4.3

cpe:2.3:h:cisco:call_manager:4.3
Cisco » Call Manager » Version: 4.3(1)

cpe:2.3:h:cisco:call_manager:4.3(1)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-3109

Products

Pricing

Contact Us