CVE-2013-5501

medium

Description

Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.

References

http://www.securitytracker.com/id/1029064

http://www.securityfocus.com/bid/62574

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5501

Details

Source: Mitre, NVD

Published: 2013-09-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N