XSS in Cisco Mediasense

CVE-2013-5501

Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (53.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Mediasense
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

20130919 Cisco MediaSense oraservice Cross-Site Scripting Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
1029064 (vdb-entry, x_refsource_SECTRACK)
62574 (vdb-entry, x_refsource_BID)