CVE-2014-0670: cisco mediasense Cross-site Scripting

EPSS trend

Probability

2.23%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.23% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

www.securitytracker.com/id/1029667VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/56563Third Party AdvisoryX Refsource SECUNIA
tools.cisco.com/security/center/viewAlert.x?alertId=32514X Refsource CONFIRMVendor Advisory
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670Vendor AdvisoryX Refsource CISCO
osvdb.org/102319VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/65053VDB EntryX Refsource BIDThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90615VDB EntryX Refsource XF

Related vulnerabilities

CVE-2013-5502ciscomediasense1.35%13y ago23-09-2013 10:00The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344.CVE-2013-5501ciscomediasense1.77%13y ago20-09-2013 16:00Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.CVE-2013-5500ciscomediasense1.77%13y ago20-09-2013 16:00Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338.CVE-2015-0736ciscomediasense0.99%11y ago16-05-2015 01:00Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728.CVE-2014-0672ciscomediasense2.09%12y ago22-01-2014 02:00The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.CVE-2014-0671ciscomediasense2.27%12y ago22-01-2014 02:00Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.

All vulnerabilities inmediasense

CVE-2014-0670: cisco mediasense Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References