CVE-2009-1287

Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-04-13

Last modified

2024-08-07

Weaknesses

CWE-79

Affected products

• Subscriber Edge Services Manager (Cisco)

References

• http://securitytracker.com/id?1022030
• http://www.securityfocus.com/bid/34454
• http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50349