Cisco Media Experience Engine vulnerabilities

1 vulnerability

Known vulnerabilities in Cisco Media Experience Engine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2017-9805apache software foundationapache struts+8KEV
EPSS score
99.40%
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.