| Vulnerability Name: | CVE-2014-0670 (CCN-90615) | ||||||||
| Assigned: | 2014-01-21 | ||||||||
| Published: | 2014-01-21 | ||||||||
| Updated: | 2017-08-29 | ||||||||
| Summary: | Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-79 | ||||||||
| Vulnerability Consequences: | Cross-Site Scripting | ||||||||
| References: | Source: MITRE Type: CNA CVE-2014-0670 Source: OSVDB Type: UNKNOWN 102319 Source: CCN Type: SA56563 Cisco MediaSense Search and Play Interface Cross-Site Scripting Vulnerability Source: SECUNIA Type: UNKNOWN 56563 Source: CCN Type: Cisco Security Notice Cisco MediaSense Search and Play Cross-Site Scripting Vulnerability Source: CISCO Type: Vendor Advisory 20140121 Cisco MediaSense Search and Play Cross-Site Scripting Vulnerability Source: CONFIRM Type: Vendor Advisory http://tools.cisco.com/security/center/viewAlert.x?alertId=32514 Source: BID Type: Third Party Advisory, VDB Entry 65053 Source: CCN Type: BID-65053 Cisco MediaSense Search and Play Cross Site Scripting Vulnerability Source: SECTRACK Type: Third Party Advisory, VDB Entry 1029667 Source: XF Type: UNKNOWN cisco-mediasense-cve20140670-xss(90615) Source: XF Type: UNKNOWN cisco-mediasense-cve20140670-xss(90615) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||