01 Record

CVE-2007-1467

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace,

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace,

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.23% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 68.6% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2007-03-16 21:00Z19 YR AGO
Last updated: 2024-08-07 12:59Z2 YR AGO
Reserved: 2007-03-16
Assigning CNA: mitre
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: 3ba89f42e0a356941d50e05ab52e177c98b7d9e4f57aee6f1d3a0168e24a025a

05 Affected products

VendorProductVersionsPlatforms

ciscoacs_solution_engineNot specified—

ciscocall_managerNot specified—

ciscociscoworksNot specified—

ciscoip_communicatorNot specified—

ciscomeetingplaceNot specified—

cisconetwork_analysis_moduleNot specified—

ciscosecurity_device_managerNot specified—

ciscounified_meetingplaceNot specified—

ciscounified_meetingplace_expressNot specified—

ciscounified_personal_communicatorNot specified—

ciscounified_video_advantageNot specified—

ciscounified_videoconferencingNot specified—

ciscounified_videoconferencing_managerNot specified—

ciscovpn_clientNot specified—

ciscowan_managerNot specified—

ciscowireless_control_systemNot specified—

ciscowireless_lan_controllersNot specified—

ciscowireless_lan_solution_engineNot specified—

06 References

www.securityfocus.com20070315 XSS vulnerability in the online help system of several Cisco productshttp://www.securityfocus.com/archive/1/462932/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.cisco.com20070315 Cross-Site Scripting Vulnerability in Online Help Systemhttp://www.cisco.com/en/US/products/products_security_response09186a0080803fe4.htmlvendor-advisoryx_refsource_CISCO
securityreason.com2437http://securityreason.com/securityalert/2437third-party-advisoryx_refsource_SREASON
secunia.com24499http://secunia.com/advisories/24499third-party-advisoryx_refsource_SECUNIA
exchange.xforce.ibmcloud.comcisco-presearch-xss(33024)https://exchange.xforce.ibmcloud.com/vulnerabilities/33024vdb-entryx_refsource_XF
www.securitytracker.com1017778http://www.securitytracker.com/id?1017778vdb-entryx_refsource_SECTRACK
www.securityfocus.com20070315 Re: XSS vulnerability in the online help system of several Cisco productshttp://www.securityfocus.com/archive/1/462944/100/0/threadedmailing-listx_refsource_BUGTRAQ
www.securityfocus.com22982http://www.securityfocus.com/bid/22982vdb-entryx_refsource_BID
www.vupen.comADV-2007-0973http://www.vupen.com/english/advisories/2007/0973vdb-entryx_refsource_VUPEN