CVE-2013-5500

{"id": "CVE-2013-5500", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-09-20T16:55:07.787", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5500", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/62575", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1029064", "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338."}, {"lang": "es", "value": "Multiples vulnerabilidades scripting (XSS) en la p\u00e1gina del servicio oraadmin service en Cisco MediaSense permite a atacantes remotos inyectar web scripts HTML arbitrarios a trav\u00e9s de un par\u00e1metro sin especificar, conocidos bugs IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338."}], "lastModified": "2013-10-02T19:43:20.333", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:mediasense:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B0A2D56-3667-438C-A367-4DB74F72507B"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}