CVE-2009-1287

EUVD-2009-1285
Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI.  NOTE: some of these details are obtained from third party information.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Affected Products (NVD)
VendorProductVersion
ciscosubscriber_edge_services_manager
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://securitytracker.com/id?1022030
http://www.securityfocus.com/bid/34454
http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/50349
http://securitytracker.com/id?1022030
http://www.securityfocus.com/bid/34454
http://www.xc0re.net/index.php?p=1_17_Cisco-Subscriber-Edge-Services-Manager-Multiple-Vulnerabilities
https://exchange.xforce.ibmcloud.com/vulnerabilities/50349