CVE-2014-0673

Cisco Video Surveillance 5000 HD IP Dome Camera - Cross-Site Scripting via Crafted URL

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65145

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90733

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029689

Broken Link vdb-entry x_refsource_osvdb

http://osvdb.org/102557

Permissions Required third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56552

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32568

Scores

EPSS 0.0223

EPSS Percentile 80.9%

Details

CWE

CWE-79

Status published

Products (2)

cisco/video_surveillance_indoor_fixed_dome_ip_hd_camera 5010

cisco/video_surveillance_indoor_fixed_dome_ip_hd_camera 5011

Published Jan 25, 2014

Tracked Since Feb 18, 2026