{"api_version":"1","generated_at":"2026-07-23T10:14:25+00:00","cve":"CVE-2007-5582","urls":{"html":"https://cve.report/CVE-2007-5582","api":"https://cve.report/api/cve/CVE-2007-5582.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5582","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5582"},"summary":{"title":"CVE-2007-5582","description":"Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"cisco","published_at":"2007-12-15 01:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/","name":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Liquidmatrix Security Digest » Advisory: Cross Site Scripting in CiscoWorks","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289","name":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"503 Service Unavailable","mime":"text/html","httpstatus":"503","archivestatus":"503"},{"url":"http://securitytracker.com/id?1019043","name":"http://securitytracker.com/id?1019043","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CiscoWorks Input Validation Hole in Login Page Permits Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/27902","name":"http://secunia.com/advisories/27902","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CiscoWorks Common Services Cross-Site Scripting Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26708","name":"http://www.securityfocus.com/bid/26708","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco CiscoWorks Login Script Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/484609/100/0/threaded","name":"http://www.securityfocus.com/archive/1/484609/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/4102","name":"http://www.vupen.com/english/advisories/2007/4102","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38862","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38862","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml","name":"http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Cisco - Networking, Cloud, and Cybersecurity Solutions","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3449","name":"http://securityreason.com/securityalert/3449","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cross Site Scripting in CiscoWorks - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5582","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5582","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5582","vulnerable":"1","versionEndIncluding":"2.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"ciscoworks_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:39:12.447Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1019043","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019043"},{"name":"ADV-2007-4102","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/4102"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/"},{"name":"20071205 Advisory: Cross Site Scripting in CiscoWorks","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/484609/100/0/threaded"},{"name":"3449","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3449"},{"name":"ciscoworks-cs-loginpage-xss(38862)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38862"},{"name":"26708","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26708"},{"name":"20071205 CiscoWorks Server XSS Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289"},{"name":"27902","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27902"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"1019043","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019043"},{"name":"ADV-2007-4102","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/4102"},{"tags":["x_refsource_MISC"],"url":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/"},{"name":"20071205 Advisory: Cross Site Scripting in CiscoWorks","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/484609/100/0/threaded"},{"name":"3449","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3449"},{"name":"ciscoworks-cs-loginpage-xss(38862)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38862"},{"name":"26708","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26708"},{"name":"20071205 CiscoWorks Server XSS Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml"},{"tags":["x_refsource_CONFIRM"],"url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289"},{"name":"27902","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27902"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2007-5582","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1019043","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019043"},{"name":"ADV-2007-4102","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/4102"},{"name":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/","refsource":"MISC","url":"http://www.liquidmatrix.org/blog/2007/12/05/advisory-cross-site-scripting-in-ciscoworks/"},{"name":"20071205 Advisory: Cross Site Scripting in CiscoWorks","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/484609/100/0/threaded"},{"name":"3449","refsource":"SREASON","url":"http://securityreason.com/securityalert/3449"},{"name":"ciscoworks-cs-loginpage-xss(38862)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38862"},{"name":"26708","refsource":"BID","url":"http://www.securityfocus.com/bid/26708"},{"name":"20071205 CiscoWorks Server XSS Vulnerability","refsource":"CISCO","url":"http://www.cisco.com/warp/public/707/cisco-sr-20071205-cw.shtml"},{"name":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289","refsource":"CONFIRM","url":"http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk69289"},{"name":"27902","refsource":"SECUNIA","url":"http://secunia.com/advisories/27902"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2007-5582","datePublished":"2007-12-15T01:00:00.000Z","dateReserved":"2007-10-19T00:00:00.000Z","dateUpdated":"2024-08-07T15:39:12.447Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-12-15 01:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"AB019E66-471E-44BA-BE69-55A2DC867FF0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5582","Ordinal":"1","Title":"CVE-2007-5582","CVE":"CVE-2007-5582","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5582","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2007-5582"},{"CveYear":"2007","CveId":"5582","Ordinal":"2","NoteData":"2007-12-14","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5582","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}