Mediasense vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ME

Product

Mediasense

by Cisco · last CVE Jun 7, 2018

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 1High 1Medium 0Low 0

Severity

All severities9 Critical1 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Mediasense to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-12337	9.8	6%	Nov 16	A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified
CVE-2017-6779	7.5	2%	Jun 7	Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.5 before 11.5su2; 9.5(1)
CVE-2015-0736	–	1%	May 16	Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID… Affected: 9.1(1); 10.0(1); 10.5(1)
CVE-2014-0672	–	2%	Jan 22	The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings… Affected: All versions, or not specified
CVE-2014-0671	–	2%	Jan 22	Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug… Affected: All versions, or not specified
CVE-2014-0670	–	2%	Jan 22	Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified… Affected: All versions, or not specified
CVE-2013-5502	–	1%	Sep 23	The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie… Affected: All versions, or not specified
CVE-2013-5501	–	2%	Sep 20	Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter,… Affected: All versions, or not specified
CVE-2013-5500	–	2%	Sep 20	Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an… Affected: All versions, or not specified