CVE-2014-0670

Опубликовано: 22 янв. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.

Ссылки

http://osvdb.org/102319
http://secunia.com/advisories/56563
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32514
Vendor Advisory
http://www.securityfocus.com/bid/65053
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029667
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90615
http://osvdb.org/102319
http://secunia.com/advisories/56563
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32514
Vendor Advisory
http://www.securityfocus.com/bid/65053
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029667
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90615

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:mediasense:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00543

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-cmrx-m29x-6hrf

github

больше 3 лет назад