VulnerabilityModified

CVE-2014-0673

Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.

MEDIUM 4.3EPSS 2.23%

Does this matter?

Lower severity and a low EPSS score (2.23%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 2.23% probability · 83th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-79
Affected: cisco/video surveillance indoor fixed dome ip hd camera
Source: psirt@cisco.com

EPSS trend

EPSS 2.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://osvdb.org/102557Broken Link
http://secunia.com/advisories/56552Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32568Vendor Advisory
http://www.securityfocus.com/bid/65145Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029689Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90733
http://osvdb.org/102557Broken Link
http://secunia.com/advisories/56552Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32568Vendor Advisory
http://www.securityfocus.com/bid/65145Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029689Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90733

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.