CVE-2015-0747

EPSS 1.82%
Veröffentlicht 30.05.2015 14:59:04
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Videoscape Conductor Version 3.0

Cisco ≫ Headend Digital Broadband Delivery System Version -

Cisco ≫ Headend System Release Version 2.5

Cisco ≫ Headend System Release Version 2.7

Cisco ≫ Headend System Release Version 3.2

Cisco ≫ Headend System Release Version 3.5

Cisco ≫ Headend System Release Version 3.7

Cisco ≫ Headend System Release Version i4.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.82%	0.759

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/viewAlert.x?alertId=38945

Vendor Advisory

http://www.securitytracker.com/id/1032447

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-0747

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0747

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0747

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-0747