Unrated severityNVD Advisory· Published Sep 23, 2011· Updated Jun 16, 2026
CVE-2011-2544
CVE-2011-2544
Description
Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service, aka Bug ID CSCtq46488.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:cisco:telepresence_mxp_software:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:cisco:telepresence_mxp_software:*:*:*:*:*:*:*:*range: <=f9.1
- cpe:2.3:a:cisco:telepresence_mxp_software:f8.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_mxp_software:f9.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_mxp_software:f9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_mxp_software:f9.0.2:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_1000_mxp:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:telepresence_system_1700_mxp:*:*:*:*:*:*:*:*
- Range: <=F9.1
Patches
Vulnerability mechanics
References
8- www.exploit-db.com/exploits/17871nvdExploit
- secunia.com/advisories/46057nvdVendor Advisory
- secunia.com/advisories/46109nvdVendor Advisory
- securityreason.com/securityalert/8393nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/519698/100/0/threadednvd
- www.securityfocus.com/bid/49670nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/69906nvd
News mentions
0No linked articles in our index yet.