Videoscape Distribution Suite Service Manager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-6418 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Cisco Videoscape Distribution Suite Service Manager

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2015-6417 MEDIUM This Month

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Cisco Privilege Escalation Videoscape Distribution Suite Service Manager

NVD

CVSS 2.0

6.5

EPSS

0.1%

CVE-2015-6364 MEDIUM This Month

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Cisco Information Disclosure Videoscape Distribution Suite Service Manager

NVD

CVSS 2.0

5.0

EPSS

0.2%

CVE-2016-6418

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Cisco Videoscape Distribution Suite Service Manager

NVD

CVE-2015-6417

EPSS 0% CVSS 6.5

MEDIUM This Month

Cisco Privilege Escalation Videoscape Distribution Suite Service Manager

NVD

CVE-2015-6364

EPSS 0% CVSS 5.0

MEDIUM This Month

Cisco Information Disclosure Videoscape Distribution Suite Service Manager

NVD