CVEvulnerability
CVE-2014-0670
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.
Affected configurations
• cisco mediasense
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/102319 osvdb.org
- http://secunia.com/advisories/56563 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32514 Vendor Advisory
- http://www.securityfocus.com/bid/65053 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029667 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90615 exchange.xforce.ibmcloud.com
- http://osvdb.org/102319 osvdb.org
- http://secunia.com/advisories/56563 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32514 Vendor Advisory
- http://www.securityfocus.com/bid/65053 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029667 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90615 exchange.xforce.ibmcloud.com