Vulnerabilities fixed in Cisco products

🗓️ 14 Jan 2021 00:00:00Reported by NCSCType

Cisco fixed vulnerabilities across products including XSS, data manipulation, bypass, RCE, spoofing, and escalation.

Reporter	Title	Published	Views	Family All 182
ATTACKERKB	CVE-2021-1237	13 Jan 202100:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Cisco Finesse automation software allows a hacker to perform cross-site scripting attacks.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Finesse automation software allows a malicious individual to gain unauthorized access to the OpenSocial Gadget Editor.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the components of the audit log system for Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Emergency Responder, Cisco Message Exchange System Cisco Unity Connection, and the software for managing license issuance called Cisco Prime License Manager (PLM) allows a perpetrator to gain unauthorized access to protected information.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the update component of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows attackers to enhance their privileges.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Network Access Manager and Web Security Agent components of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allow a perpetrator to execute arbitrary code.	28 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for managing software for Cisco Webex Meetings Server allows attackers to carry out phishing attacks.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TCP Fast Open (TFO) protocol extension in the Snort intrusion detection system allows a hacker to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the detection mechanism for applications in the Snort intrusion detection system allows attackers to increase their privileges.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Webex Teams collaboration software, related to errors in processing images of various symbols, allows a hacker to manipulate the names of files in the messaging interface.	2 Feb 202100:00	–	bdu_fstec

14 Jan 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 27.2

CVSS 3.17.8

CVSS 35.8

EPSS0.00646

SSVC