CVE-2013-5492

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Sep 13, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-54936.8The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access re CVE-2013-54946.8Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace CVE-2013-54954.3Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attacker CVE-2013-54966.3Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element relo CVE-2013-54974.3The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, whi CVE-2013-54985.0The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remot CVE-2013-54995.7The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lea CVE-2013-55004.3Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitr CVE-2013-55014.3Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script o CVE-2013-55025.0The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to ob CVE-2013-55037.8The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause CVE-2013-55044.3Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote