CVE-2014-0670

Cisco MediaSense - Cross-Site Scripting via Search and Play Interface Parameter

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029667

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56563

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32514

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/102319

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65053

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90615

Scores

EPSS 0.0223

EPSS Percentile 80.9%

Details

CWE

CWE-79

Status published

Products (1)

cisco/mediasense

Published Jan 22, 2014

Tracked Since Feb 18, 2026