CVE-2017-12265

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka HREF XSS. The...

CVE-2017-12245

CVE-2017-12245 describes a memory-consumption DoS vulnerability in Cisco Firepower Threat Defense (FTD) Software’s SSL traffic decryption. Root cause: an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and communicates with the ASA handler, enabling an unauthentic...

CVE-2017-12265

Cisco CVE-2017-12265 affects the Cisco ASA web-based management interface when WEBVPN is enabled. It is a cross-site scripting (XSS) vulnerability caused by insufficient input validation, exploitable by convincing a user to click a crafted link, enabling arbitrary script execution or access to br...

CVE-2017-12246

The CVE-2017-12246 entry concerns Cisco Adaptive Security Appliance (ASA) Software. Root cause: incomplete input validation of HTTP headers in the Direct Authentication feature. A remote, unauthenticated attacker can trigger a crafted HTTP request to the device’s local IP, causing the ASA to relo...

Cisco Adaptive Security Appliance Software Direct Authentication Denial of Service Vulnerability

A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service DoS condition. The vulnerability is due...

Cisco Adaptive Security Appliance Software HREF Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...

The vulnerability of the web interface of Cisco Adaptive Security Appliance’s microprogramming software allows a hacker to obtain user credentials.

The vulnerability of the web interface of Cisco Adaptive Security Appliance microprogramming software is related to the lack of protection for service data during interactions with the SSL Connection Profile using the LDAP protocol. Exploiting this vulnerability can allow a malicious actor to...

Cisco Adaptive Security Appliance Authenticated Cross-Site Scripting Vulnerability (CSCvd82064)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to...

CVE-2017-6752

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA 9.33 and 9.62 could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the...

CVE-2017-6765

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...

Spoofing

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA 9.33 and 9.62 could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the...

CVE-2017-6764

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.51 could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2017-6752

The CVE-2017-6752 issue affects Cisco ASA Web UI for versions 9.3(3) and 9.6(2). It stems from the interaction between LDAP and SSL Connection Profile, enabling an unauthenticated remote attacker to enumerate valid usernames via the device IP. This information disclosure stems from username enume...

CVE-2017-6764

The CVE-2017-6764 issue affects Cisco ASA 9.5(1) web-based management: an authenticated, remote attacker can trigger a cross-site scripting (XSS) vulnerability by persuading a user to click a crafted link. The root cause is insufficient validation of user-supplied input in the ASA web interface, ...

CVE-2017-6765

CVE-2017-6765 affects Cisco ASA WebVPN via the web-based management interface. Affected are ASA software 9.1(6.11) and 9.4(1.2). Root cause: insufficient validation of user-supplied input in the web UI, enabling cross-site scripting (XSS) when a user clicks a crafted link. Impact: an unauthentica...

CVE-2017-6752

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA 9.33 and 9.62 could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the...

CVE-2017-6765

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...

CVE-2017-6764

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.51 could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2017-6770

CVE-2017-6770 affects Cisco IOS, ASA, NX-OS, and IOS XE platforms (OSPF LSA database). The issue enables an unauthenticated, remote attacker to seize control of the OSPF AS routing table by injecting crafted OSPF LSA type 1 packets, potentially intercepting or black-holing traffic. The vulnerabil...

Cisco Adaptive Security Appliance Username Enumeration Information Disclosure Vulnerability (cisco-sa-20170802-asa2)

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. Copyright C 2017 Greenbone Networks GmbH Some text...