PT-2024-2196 · Unknown · Filecatalyst Workflow

Name of the Vulnerable Software and Affected Versions: FileCatalyst Workflow versions prior to 5.1.6 Build 114 Description: A directory traversal vulnerability within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ director...

Cisco Catalyst and Integrated Services Virtual Router Security Vulnerability

Cisco Catalyst is a family of switches from the American company Cisco. A security vulnerability exists in several Cisco products, which stems from a vulnerability in the Snort access control policy that could allow bypassing the policy configured on the affected system. The following products ar...

Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability

Cisco Catalyst SD-WAN Manager is an open and secure management console for cloud-level architectures. A local file inclusion vulnerability exists in the Cisco Catalyst SD-WAN Manager web UI, which can be exploited by a remote attacker to submit a special request that can read the contents of a...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

Cisco Catalyst SD-WAN Manager web UI Local File Inclusion (CVE-2023-20261) allows an authenticated remote attacker to read arbitrary files from the underlying Linux filesystem by abusing improper validation of parameters in the web UI. Affected component is the web UI of Cisco Catalyst SD-WAN Man...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

CVE-2023-20261

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

Cisco Catalyst SD-WAN Manager Local File Inclusion Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could exploit this vulnerabilit...

Cisco Catalyst 安全漏洞

Cisco Catalyst SD-WAN Manager is an open and secure management console for cloud-level architectures. A local file inclusion vulnerability exists in the Cisco Catalyst SD-WAN Manager web UI, which can be exploited by a remote attacker to submit a special request that can read the contents of a...

The vulnerability in the control interface of the Cisco IOS XE operating system for Cisco Catalyst 3650 and Catalyst 3850 devices allows a hacker to cause service interruptions.

The vulnerability of the Cisco IOS XE operating system control interface for Cisco Catalyst 3650 and Catalyst 3850 switches is related to improper management of resources during traffic processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Cisco Catalyst SD-WAN Manager Authorization Bypass Vulnerability

Cisco Catalyst SD-WAN Manager is an SD-WAN network management program from Cisco USA. A security vulnerability exists in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature, which can be exploited by a remote attacker to submit a special request for unauthorize...

Cisco Catalyst SD-WAN Manager HTML Injection Vulnerability

Cisco Catalyst is a series of switches from the American company Cisco. An HTML injection vulnerability exists in Cisco Catalyst SD-WAN Manager that stems from improper validation of user-supplied data in element fields and can be exploited by an authenticated, remote attacker to inject HTML...

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) centralized network management system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage centralized network management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a attacker to cause a service failure.

The vulnerability of the SSH service in the Cisco Catalyst SD-WAN Manager centralized network management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) allows a attacker to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage relates to the lack of protection for the web page structure during the processing of element fields. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to deficiencies in authentication procedures, allows a perpetrator to trigger a service failure.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Vulnerabilities fixed in Cisco IOS

Cisco has fixed vulnerabilities in the IOS firmware of several systems, such as Catalyst, Aironet, Integrated Routers, Analog Voice Gateways. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service...

The vulnerability of the application-specific SAML interface of the Cisco Catalyst SD-WAN Manager centralized network management system allows a perpetrator to gain access to the application.

The vulnerability of the application software interface for the Single Sign-On module of the Cisco Catalyst SD-WAN Manager centralized network management system is related to errors during authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the...

Cisco IOS XE Software for Catalyst 3650 Catalyst 3850 Series Switches DoS (cisco-sa-cat3k-dos-ZZA4Gb3r)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly,...