{"id":"CVE-2009-0743","aliases":["EUVD-2009-0743","GHSA-mw5g-cjmr-pr3j"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco...","description":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00896,"percentile":0.59795,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2009-02-27T17:00:00Z","modified":"2026-06-16T23:05:41Z","products":[{"vendor":"cisco","product":"unified_meetingplace"}],"references":[{"url":"http://www.securityfocus.com/bid/33915","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securitytracker.com/id?1021778","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48965","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/501251/30/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0743"},{"url":"https://github.com/advisories/GHSA-mw5g-cjmr-pr3j"}],"sources":{"cve":[{"id":"CVE-2009-0743","description":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.","status":"published","published":"2009-02-27T17:00:00Z","modified":"2024-08-07T04:48:51.533Z","updated_at":"2026-11-02T14:33:25.896677Z"}],"euvd":[{"id":"EUVD-2009-0743","description":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.","status":"published","published":"2009-02-27T17:00:00Z","modified":"2024-08-07T04:48:51Z","updated_at":"2026-11-03T01:39:24.749817Z"}],"ghsa":[{"id":"GHSA-mw5g-cjmr-pr3j","title":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco...","description":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.","status":"published","published":"2022-05-02T03:17:54Z","modified":"2023-01-31T05:08:01Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:49:19.380815Z"}],"nvd":[{"id":"CVE-2009-0743","description":"Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field.","status":"published","published":"2009-02-27T17:30:09.877Z","modified":"2026-06-16T23:05:41.02Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}