Cisco Security Monitoring Analysis And Response System vulnerabilities

4 CVEs affecting Cisco Security Monitoring Analysis And Response System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5563, published 2013-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-3733, published 2006-07-21. High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days. jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers…
CVE-2007-0397, published 2007-01-20. Medium severity, CVSS 6.4. EPSS: 2.9% chance of exploitation in the next 30 days. The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public…
CVE-2013-1140, published 2013-03-06. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity…
CVE-2013-5563, published 2013-11-06. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) allows remote attackers to inject arbitrary web script or…