Media Experience Engine vulnerabilities
1 known vulnerability in Media Experience Engine from Cisco. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
1exploited
8.1average CVSS score
Latest first
- 8.1 High severity
Apache Struts Deserialization of Untrusted Data Exploited
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payload