{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:01:50Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20100526-mediator","slug":"cisco-sa-20100526-mediator","vendor":"Cisco","title":"Multiple Vulnerabilities in Cisco Network Building Mediator","summary":"Multiple vulnerabilities exist in the Cisco Network Building Mediator (NBM) products. These vulnerabilities also affect the legacy Richards-Zeta Mediator products. This security advisory outlines details of the following vulnerabilities: Default credentials Privilege escalation Unauthorized information interception Unauthorized information access Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate some of the listed vulnerabilities are available. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator.","severity":"Critical","published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20100526-mediator/csaf/cisco-sa-20100526-mediator.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":6,"visible_product_count":1,"public_evidence_count":6,"kev_count":0,"highest_epss":0.04585},"cves":[{"id":"CVE-2010-0600","kev":false,"epss":{"score":0.04585,"percentile":0.90606,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-0597","kev":false,"epss":{"score":0.03632,"percentile":0.88285,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-0599","kev":false,"epss":{"score":0.03218,"percentile":0.86822,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-0598","kev":false,"epss":{"score":0.03218,"percentile":0.86822,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-0595","kev":false,"epss":{"score":0.03121,"percentile":0.86398,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-0596","kev":false,"epss":{"score":0.02107,"percentile":0.79716,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0600"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.04585,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":1},{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0597"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03632,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":2},{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0599"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03218,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":3},{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0598"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03218,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":4},{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0595"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03121,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":5},{"product":{"name":"Cisco Network Building Mediator Framework","slug":"cisco-network-building-mediator-framework","vendor":"Cisco"},"cve":{"id":"CVE-2010-0596"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:28:13Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Building Mediator Framework","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02107,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-05-26T16:00:00Z","updated_at":"2010-05-26T16:00:00Z","advisory_updated_at":"2010-05-26T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100526-mediator","row_display_order":6}]}