Test ID:	1.3.6.1.4.1.25623.1.0.809734
Category:	CISCO
Title:	Cisco Meeting Server Cross-Site Scripting Vulnerability (cisco-sa-20160714-ms)
Summary:	Cisco Meeting Server is prone to a cross-site scripting (XSS) vulnerability.
Description:	Summary: Cisco Meeting Server is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: The flaw exists due to an error in validation of certain parameters that are passed to an affected device via an HTTP request. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to execute arbitrary script code in the context of the affected management interface or allow the attacker to access sensitive browser-based information. Affected Software/OS: Cisco Meeting Server 1.7.x prior to 1.7.24, 1.8.x prior to 1.8.15 and 1.9.x prior to 1.9.2 Solution: Upgrade to Cisco Meeting Server 1.7.24 or 1.8.15 or 1.9.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1451 Cisco Security Advisory: 20160714 Cisco Meeting Server Persistent Cross-Site Scripting Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160714-ms
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.