Mediasense Security Vulnerabilities and Issues — Mediasense CVE List

Lucene search

CiscoMediasense

4 matches found

CVE•added 2014/01/22 5:22 a.m.•45 views

CVE-2014-0670

Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.

4.3CVSS5.9AI score0.00543EPSS

CVE•added 2014/01/22 5:22 a.m.•38 views

CVE-2014-0672

The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.

4CVSS6.5AI score0.00501EPSS

CVE•added 2013/09/20 4:55 p.m.•35 views

CVE-2013-5501

Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.

4.3CVSS5.9AI score0.00296EPSS

CVE•added 2013/09/20 4:55 p.m.•25 views

CVE-2013-5500

Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338.

4.3CVSS5.9AI score0.00296EPSS