Cisco Application And Content Networking System Software vulnerabilities

2 CVEs affecting Cisco Application And Content Networking System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0774, published 2015-06-12.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-3444, published 2013-08-01. High severity, CVSS 9.0. EPSS: 4.2% chance of exploitation in the next 30 days. The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before…
• CVE-2015-0774, published 2015-06-12. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID…