{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:40:17Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20070808-CVE-2007-4284","slug":"cisco-sa-20070808-cve-2007-4284","vendor":"Cisco","title":"Cisco Unified MeetingPlace Template Cross-Site Scripting Vulnerability","summary":"Cisco Unified MeetingPlace versions prior to 5.3.235.0 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability exists due to insufficient filtering of parameters by Cisco Unified MeetingPlace.  An unauthenticated, remote attacker could exploit this vulnerability by convincing a user to follow a malicious link.  When followed, the link could trigger the execution of arbitrary script code or HTML within a user's browser session in the security context of the Cisco Unified MeetingPlace site. Cisco confirmed this vulnerability in a security response and released updated software. To exploit this vulnerability, an attacker must convince a user to follow a malicious URL, likely provided within an e-mail message.  Prior to an exploit, the user must have a valid, logged-in session to the affected application or log in as part of an exploit attempt.  As a result of successful exploitation, the attacker could execute arbitrary script code in the user's browser session within the Cisco Unified MeetingPlace application.  An exploit could allow the attacker to gain access to sensitive browser-based information or possibly take actions on the affected site as the user. Software versions 5.3.333.0 and later have been corrected to return a properly formatted XML message.","severity":"Medium","published_at":"2007-08-08T16:55:22Z","updated_at":"2007-08-08T16:55:22Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070808-CVE-2007-4284","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20070808-CVE-2007-4284/csaf/Cisco-SA-20070808-CVE-2007-4284.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01569},"cves":[{"id":"CVE-2007-4284","kev":false,"epss":{"score":0.01569,"percentile":0.72633,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified MeetingPlace","slug":"cisco-unified-meetingplace","vendor":"Cisco"},"cve":{"id":"CVE-2007-4284"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:18:35Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified MeetingPlace","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01569,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-08-08T16:55:22Z","updated_at":"2007-08-08T16:55:22Z","advisory_updated_at":"2007-08-08T16:55:22Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070808-CVE-2007-4284","row_display_order":1}]}