Improper input validation in Cisco Mediasense
CVE-2014-0671
Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.007 (73.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Mediasense
- N/a — versions n/a
Weakness classification (CWE)
References
- 65055 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- 56544 (x_refsource_SECUNIA, third-party-advisory)
- 1029669 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
- 102341 (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- 20140121 Cisco MediaSense Open Redirection Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cisco-mediasense-cve20140671-open-redirect(90617) (vdb-entry, x_refsource_XF)