Cisco Digital Media Manager vulnerabilities

6 CVEs affecting Cisco Digital Media Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9805, published 2017-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-9805: Apache Struts Deserialization of Untrusted Data Vulnerability, published 2017-09-15. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.4% chance of exploitation in the next 30 days. The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can…
CVE-2010-0570, published 2010-03-05. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web…
CVE-2012-0329, published 2012-01-19. High severity, CVSS 9.0. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
CVE-2010-0571, published 2010-03-05. High severity, CVSS 8.5. EPSS: 2.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a…
CVE-2010-0572, published 2010-03-05. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace,…
CVE-2013-3446, published 2013-09-12. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified…