CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2832

Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.178

EPSS Ranking 94.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-2832

Cisco » Call Manager » Version: 3.3

cpe:2.3:h:cisco:call_manager:3.3
Cisco » Call Manager » Version: 3.3(3)

cpe:2.3:h:cisco:call_manager:3.3(3)
Cisco » Call Manager » Version: 3.3(3)es61

cpe:2.3:h:cisco:call_manager:3.3(3)es61
Cisco » Call Manager » Version: 3.3(4)es25

cpe:2.3:h:cisco:call_manager:3.3(4)es25
Cisco » Call Manager » Version: 3.3(5)

cpe:2.3:h:cisco:call_manager:3.3(5)
Cisco » Call Manager » Version: 3.3(5)es30

cpe:2.3:h:cisco:call_manager:3.3(5)es30
Cisco » Call Manager » Version: 3.3(5)sr1

cpe:2.3:h:cisco:call_manager:3.3(5)sr1
Cisco » Call Manager » Version: 3.3(5)sr2

cpe:2.3:h:cisco:call_manager:3.3(5)sr2
Cisco » Call Manager » Version: 4.1

cpe:2.3:h:cisco:call_manager:4.1
Cisco » Call Manager » Version: 4.1(2)es33

cpe:2.3:h:cisco:call_manager:4.1(2)es33
Cisco » Call Manager » Version: 4.1(2)es55

cpe:2.3:h:cisco:call_manager:4.1(2)es55
Cisco » Call Manager » Version: 4.1(3)es07

cpe:2.3:h:cisco:call_manager:4.1(3)es07
Cisco » Call Manager » Version: 4.1(3)es32

cpe:2.3:h:cisco:call_manager:4.1(3)es32
Cisco » Call Manager » Version: 4.1(3)sr1

cpe:2.3:h:cisco:call_manager:4.1(3)sr1
Cisco » Call Manager » Version: 4.1(3)sr2

cpe:2.3:h:cisco:call_manager:4.1(3)sr2
Cisco » Call Manager » Version: 4.1(3)sr3

cpe:2.3:h:cisco:call_manager:4.1(3)sr3
Cisco » Call Manager » Version: 4.2(3)

cpe:2.3:h:cisco:call_manager:4.2(3)
Cisco » Call Manager » Version: 4.2(3)sr1

cpe:2.3:h:cisco:call_manager:4.2(3)sr1
Cisco » Call Manager » Version: 4.3(1)

cpe:2.3:h:cisco:call_manager:4.3(1)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2832

Products

Pricing

Contact Us