CVE-2011-2544

no score yetEPSS 4.7%

Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.

EPSS: 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-09-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:telepresence_mxp_software
cisco:telepresence_system_1000_mxp
cisco:telepresence_system_1700_mxp

References

http://secunia.com/advisories/46057
http://secunia.com/advisories/46109
http://securityreason.com/securityalert/8393
http://securitytracker.com/id?1026072
http://www.exploit-db.com/exploits/17871

Check your stack JSON