Cross-site Scripting Vulnerability in Cisco MediaSense
CVE-2013-5501

Currently unrated

Key Information:

Vendor
Cisco
Status
Mediasense
Vendor
CVE Published:
20 September 2013

Summary

A cross-site scripting vulnerability exists in the oraservice page of Cisco MediaSense, which allows remote attackers to inject arbitrary web scripts or HTML through an unspecified parameter. This could lead to a range of malicious activities, including data theft and session hijacking, jeopardizing the security of affected systems.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1029064
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/62574
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.