CVE-2014-0727: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CallManager Interactive Voice Response CMIVR interface in Cisco Unified Communications Manager UCM allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318...

CVE-2014-0729: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Enterprise Mobility Application EMApp interface in Cisco Unified Communications Manager UCM allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302...

CVE-2014-0723: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager UCM allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343...

Cisco WLC Web-Based Management Interface XSS Vulnerability (CSCuf77810)

A vulnerability in the web-based management interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

PT-2014-3441

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.33 through 6.0.37 Description The issue allows remote attackers to conduct session fixation attacks via a crafted URL, because the disableURLRewriting setting is not considered when handling a session ID in a URL. Th...

CVE-2014-0836

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0836

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3880

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2 MR1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This enables attackers to potentially execute malicious script...

CVE-2014-0680

Cross-site scripting XSS vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038...

CVE-2014-0681

Cross-site scripting XSS vulnerability in Cisco Identity Services Engine ISE 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Identity Services Engine ISE 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064...

Cross site scripting

Cross-site scripting XSS vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038...

CVE-2014-0681

Cross-site scripting XSS vulnerability in Cisco Identity Services Engine ISE 1.2 patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled during generation of report-output pages, aka Bug ID CSCui15064...

CVE-2014-0680

Cross-site scripting XSS vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038...

PT-2014-3776

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions 1.2 patch 2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a report containing a crafted URL that is not properly handled...

CVE-2014-0682: Undefined Security Weakness

Cisco WebEx Meetings Server allows remote authenticated users to bypass authorization checks and 1 join arbitrary meetings, or 2 terminate a meeting without having a host role, via a crafted URL, aka Bug ID CSCuj42346...

PT-2014-3777

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue allows remote authenticated users to bypass authorization checks. This can lead to two main consequences: 1 joining arbitrary meetings, and 2 terminating a meeti...

Cross site scripting

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...