{"api_version":"1","generated_at":"2026-07-23T13:16:07+00:00","cve":"CVE-2013-1123","urls":{"html":"https://cve.report/CVE-2013-1123","api":"https://cve.report/api/cve/CVE-2013-1123.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-1123","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-1123"},"summary":{"title":"CVE-2013-1123","description":"Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.","state":"PUBLISHED","assigner":"cisco","published_at":"2013-02-15 12:09:28","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/57885","name":"http://www.securityfocus.com/bid/57885","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Unified MeetingPlace CVE-2013-1123 Unspecified Cross Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123","name":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Security Notice: Cisco Unified MeetingPlace Server Cross-Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228","name":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Alert Details - Security Center - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81986","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81986","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/52109","name":"http://secunia.com/advisories/52109","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA52109 - Cisco Unified MeetingPlace Web Interface Cross-Site Scripting Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/90075","name":"http://osvdb.org/90075","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1123","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1123","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"1123","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"unified_meetingplace","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T14:49:20.694Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"57885","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/57885"},{"name":"52109","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/52109"},{"name":"cisco-meetingplace-unspec-xss(81986)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81986"},{"name":"90075","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/90075"},{"name":"20130207 Cisco Unified MeetingPlace Server Cross-Site Scripting Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-02-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"57885","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/57885"},{"name":"52109","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/52109"},{"name":"cisco-meetingplace-unspec-xss(81986)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81986"},{"name":"90075","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/90075"},{"name":"20130207 Cisco Unified MeetingPlace Server Cross-Site Scripting Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123"},{"tags":["x_refsource_CONFIRM"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2013-1123","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"57885","refsource":"BID","url":"http://www.securityfocus.com/bid/57885"},{"name":"52109","refsource":"SECUNIA","url":"http://secunia.com/advisories/52109"},{"name":"cisco-meetingplace-unspec-xss(81986)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/81986"},{"name":"90075","refsource":"OSVDB","url":"http://osvdb.org/90075"},{"name":"20130207 Cisco Unified MeetingPlace Server Cross-Site Scripting Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1123"},{"name":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228","refsource":"CONFIRM","url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=28228"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2013-1123","datePublished":"2013-02-15T11:00:00.000Z","dateReserved":"2013-01-11T00:00:00.000Z","dateUpdated":"2024-08-06T14:49:20.694Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-02-15 12:09:28","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F1B3B645-4500-4B63-8D1A-1139537DA522"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"1123","Ordinal":"1","Title":"CVE-2013-1123","CVE":"CVE-2013-1123","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"1123","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.","Type":"Description","Title":"CVE-2013-1123"},{"CveYear":"2013","CveId":"1123","Ordinal":"2","NoteData":"2013-02-15","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"1123","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}