EUVD-2014-3421

Malware in sbrugna...

EUVD-2017-12988

Malware in sbrugna...

Cisco Prime Optical for Service Providers Information Disclosure Vulnerability

Cisco Prime Optical is a suite of products offered to service providers to manage converged IP and optical transport networks. It supports auto-configuration, resource allocation and troubleshooting to help operators perform end-to-end circuit creation more efficiently. An information disclosure...

Design/Logic Flaw

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2017-3871

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

PT-2017-16152

Name of the Vulnerable Software and Affected Versions Cisco Prime Optical for Service Providers version 10.60.1 Description A RADIUS Secret Disclosure issue in the web network management interface could allow an authenticated, remote attacker to disclose sensitive information in the configuration...

CVE-2017-3871: Exposure of Sensitive Information to an Unauthorized Actor

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2014-3408

Cross-site scripting XSS vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763...

CVE-2014-3408

Cross-site scripting XSS vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763...

CVE-2014-3408

Cisco Prime Optical 10’s web framework is affected by CVE-2014-3408, a reflected XSS in the web framework via an unspecified parameter (Bug ID CSCuq80763). The NVD entry lists a CVSSv2 base score of 6.8 (Network, medium complexity, no auth, partial impacts). Cisco’s advisory states that software ...

CVE-2014-3408: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web framework in Cisco Prime Optical 10 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq80763...

PT-2014-5297

Name of the Vulnerable Software and Affected Versions Cisco Prime Optical version 10 Description A cross-site scripting XSS issue exists in the web framework, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For Cisco Prime Optical...

Cisco Prime Optical Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco Prime Optical could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack. The vulnerability is due to insufficient validation of a parameter. An attacker could exploit this vulnerability by persuading a...