This page lists publicly disclosed CVE vulnerabilities affecting cisco digital_media_manager (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2017-9805 KEV | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads. | [email protected] | 8.1 | 99.46% | 2017-09-15 | 2026-06-17 |
| CVE-2013-3446 | Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849. | [email protected] | 5.8 | 1.06% | 2013-09-12 | 2026-06-16 |
| CVE-2012-0329 | Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878. | [email protected] | 9.0 | 3.21% | 2012-01-19 | 2026-06-16 |
| CVE-2010-0572 | Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050. | [email protected] | 7.1 | 2.50% | 2010-03-05 | 2026-06-16 |
| CVE-2010-0571 | Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008. | [email protected] | 8.5 | 2.84% | 2010-03-05 | 2026-06-16 |
| CVE-2010-0570 | Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378. | [email protected] | 10.0 | 4.53% | 2010-03-05 | 2026-06-16 |