CVE

Id
68079  
CVE No.
CVE-2014-0670  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.  
Phase
Assigned (20140102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
657359 68079 CVE-2014-0670 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=32514  View
657360 68079 CVE-2014-0670 CISCO:20140121 Cisco MediaSense Search and Play Cross-Site Scripting Vulnerability  View
657361 68079 CVE-2014-0670 URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0670  View
657362 68079 CVE-2014-0670 BID:65053  View
657363 68079 CVE-2014-0670 URL:http://www.securityfocus.com/bid/65053  View
657364 68079 CVE-2014-0670 OSVDB:102319  View
657365 68079 CVE-2014-0670 URL:http://osvdb.org/102319  View
657366 68079 CVE-2014-0670 SECTRACK:1029667  View
657367 68079 CVE-2014-0670 URL:http://www.securitytracker.com/id/1029667  View
657368 68079 CVE-2014-0670 SECUNIA:56563  View
657369 68079 CVE-2014-0670 URL:http://secunia.com/advisories/56563  View
657370 68079 CVE-2014-0670 XF:cisco-mediasense-cve20140670-xss(90615)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12380 JVNDB-2014-001255 Cisco Secure Access Control System のポータルインターフェースにおけるセッションをハイジャックされる脆弱性 Cisco Secure Access Control System (ACS) のポータルインターフェースは、セッションを適切に管理しないため、セッションをハイジャックされる、および権限を取得される脆弱性が存在します。 CVE-2014-0678 68079 5.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001255.html  View