Known Vulnerabilities for Mediasense by Cisco
Listed below are 9 of the newest known vulnerabilities associated with "Mediasense" by "Cisco".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2017-12337 | A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software p... | 9.8 - CRITICAL | 2017-11-16 | 2019-10-09 |
| CVE-2017-6779 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collab... | 7.5 - HIGH | 2018-06-07 | 2019-10-09 |
| CVE-2015-0736 | Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the... | 6.8 - MEDIUM | 2015-05-16 | 2017-01-06 |
| CVE-2014-0672 | The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote a... | 4 - MEDIUM | 2014-01-22 | 2017-08-29 |
| CVE-2014-0671 | Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct ... | 5.8 - MEDIUM | 2014-01-22 | 2017-08-29 |
| CVE-2014-0670 | Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inje... | 4.3 - MEDIUM | 2014-01-22 | 2017-08-29 |
| CVE-2013-5502 | The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote ... | 5 - MEDIUM | 2013-09-23 | 2016-09-20 |
| CVE-2013-5501 | Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitra... | 4.3 - MEDIUM | 2013-09-20 | 2013-10-02 |
| CVE-2013-5500 | Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers t... | 4.3 - MEDIUM | 2013-09-20 | 2013-10-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Mediasense | 9.1\(1\) | All | All | All |
| Application | Cisco | Mediasense | 9.0\(1a\) | All | All | All |
| Application | Cisco | Mediasense | 8.5\(4\) | All | All | All |
| Application | Cisco | Mediasense | 8.5\(3\) | All | All | All |
| Application | Cisco | Mediasense | 11.5\(1\) | All | All | All |
| Application | Cisco | Mediasense | 11.5su2 | All | All | All |
| Application | Cisco | Mediasense | 11.5 | All | All | All |
| Application | Cisco | Mediasense | 10.5\(1\) | All | All | All |
| Application | Cisco | Mediasense | 10.0\(1\) | All | All | All |
| Application | Cisco | Mediasense | - | All | All | All |