Lucene search

K
cveCiscoCVE-2013-5501
HistorySep 20, 2013 - 4:55 p.m.

CVE-2013-5501

2013-09-2016:55:07
CWE-79
cisco
web.nvd.nist.gov
25
cve-2013-5501
cross-site scripting
xss
cisco mediasense
bug id cscuj23328
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

56.9%

Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.

Affected configurations

Nvd
Node
ciscomediasenseMatch-
VendorProductVersionCPE
ciscomediasense-cpe:2.3:a:cisco:mediasense:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

56.9%

Related for CVE-2013-5501