7007 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Business Voice Services Manager BVSM page in Cisco Unified Communications Domain Manager 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and...
CVE-2014-2104
Multiple cross-site scripting XSS vulnerabilities in the Business Voice Services Manager BVSM page in Cisco Unified Communications Domain Manager 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and...
CVE-2014-2104
Multiple cross-site scripting XSS vulnerabilities in the Business Voice Services Manager BVSM page in Cisco Unified Communications Domain Manager 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and...
CVE-2014-2104
Cisco Unified Communications Domain Manager BVSM page (in 9.0(.1)) contains multiple XSS flaws due to insufficient input validation of BVSM parameters. Exploitation allows remote attackers to craft malicious links/URIs to inject script or HTML via unspecified parameters, potentially compromising ...
Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of...
Lavabit Case May Be One of Many in Coming Years
SAN FRANCISCO–The Lavabit case, which saw the secure email provider’s owner shut the company down after being forced to hand over to the government the encryption key that protected his users’ data, may seem like an extreme reaction to a unique situation. But, experts say it’s likely that there...
CVE-2014-0741
The certificate-import feature in the Certificate Authority Proxy Function CAPF CLI implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461...
CVE-2014-0743
The Certificate Authority Proxy Function CAPF component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468...
CVE-2014-0740
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR interface in the OS Administration component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of administrators for requests...
CVE-2014-0742
The Certificate Authority Proxy Function CAPF CLI implementation in the CSR management feature in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464...
CVE-2014-0747
The Certificate Authority Proxy Function CAPF CLI implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493...
Code injection
The Certificate Authority Proxy Function CAPF CLI implementation in the CSR management feature in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464...
Design/Logic Flaw
The certificate-import feature in the Certificate Authority Proxy Function CAPF CLI implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR interface in the OS Administration component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of administrators for requests...
Authentication flaw
The Certificate Authority Proxy Function CAPF component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468...
CVE-2014-0743
The CVE-2014-0743 entry describes a Cisco CAPF (Certificate Authority Proxy Function) flaw in Cisco Unified Communications Manager, affecting CAPF in 10.0(1) and earlier. Root cause: insufficient authentication enforcement in CAPF allows remote attackers to bypass authentication and modify inform...
CVE-2014-0740
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR interface in the OS Administration component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of administrators for requests...
CVE-2014-0747
CVE-2014-0747 affects Cisco Unified Communications Manager CAPF CLI. The vulnerability arises from insufficient input validation in the CAPF CLI, allowing an authenticated, local attacker to inject commands into the underlying operating system. Affected are Cisco Unified CM versions 10.0(1) and e...
CVE-2014-0741
The certificate-import feature in the Certificate Authority Proxy Function CAPF CLI implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461...
CVE-2014-0741
The CVE-2014-0741 issue affects Cisco Unified Communications Manager (Unified CM) via the CAPF certificate-import CLI. The root cause is insufficient input validation in the CAPF command-import flow, allowing an authenticated, local attacker with local access to read or modify arbitrary files on ...