Cisco Videoscape Distribution Suite Service Manager vulnerabilities

3 CVEs affecting Cisco Videoscape Distribution Suite Service Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6418, published 2016-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-6364, published 2015-11-14. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka…
CVE-2015-6417, published 2015-12-12. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to…
CVE-2016-6418, published 2016-10-05. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted…