Cisco Data Center Network Manager Information Disclosure (cisco-sa-dcnm-info-disclosure-tFX3KerC)

According to its self-reported version, Cisco Data Center Network Manager is affected by an information disclosure vulnerability in the web-based management interface due to missing authentication on a specific part of this interface. An unauthenticated, remote attacker can exploit this, by sendi...

Cisco Data Center Network Manager Authentication Bypass (cisco-sa-dcnm-auth-bypass-JkubGpu3)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability due to a failure in the software to perform proper authentication. An unauthenticated, remote attacker can exploit this, by browsing to one of the hosted URLs in Cisco...

The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a hacker to escalate their privileges.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a specially crafted request...

The vulnerability of the archiving utility in the Cisco Data Center Network Manager system allows a hacker to increase their privileges.

The vulnerability of the archiving utility of the Cisco Data Center Network Manager system is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a specially created...

The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a hacker to escalate their privileges.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to increase their privileges by using a static encryption key...

Cisco Data Center Network Manager Path Traversal (cisco-sa-dcnm-path-trav-2xZOnJdR)

According to its self-reported version, Cisco Data Center Network Manager is affected by a path traversal vulnerability due to a lack of proper validation of paths that are embedded within archive files. An authenticated, remote attacker can exploit this, by sending a crafted request to an affect...

Cisco Data Center Network Manager Authentication Bypass (cisco-sa-dcnm-bypass-dyEejUMs)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability in the REST API due to shared use of a static encryption key between installations. An unauthenticated, remote attacker can exploit this vulnerability to bypass...

Cisco Data Center Network Manager Improper Authorization (cisco-sa-dcnm-improper-auth-7Krd9TDT)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability in the REST API due to insufficient authorization of certain API functions. An attacker can exploit this vulnerability by sending a crafted request to the API using...

Cisco Data Center Network Manager Command Injection (cisco-sa-devmgr-cmd-inj-Umc8RHNh)

According to its self-reported version, Cisco Data Center Network Manager is affected by a command injection vulnerability due to insufficient validation of user-supplied input. A remote, authenticated attacker can exploit this vulnerability by sending crafted arguments to a specific field within...

Cisco Data Center Network Manager SQL Injection (cisco-sa-dcnm-sql-inject-8hk6PwmF)

According to its self-reported version, Cisco Data Center Network Manager is affected by a SQL injection vulnerability due to improper validation of user-supplied input. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected...

Cisco Data Center Network Manager Command Injection (cisco-sa-dcnm-rest-inj-BCt8pwAJ)

According to its self-reported version, Cisco Data Center Network Manager is affected by a command injection vulnerability in specific REST API endpoints. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to inject...

Unvalidated redirects in UPM via reverse tabnapping

Affected versions of Atlassian Jira Server and Data Center allow an authenticated attacker to redirect a user to a malicious website via an unvalidated redirect vulnerability in some Universal Plugin Manager pages, e.g. "Manage apps" and "Find new apps". Affected versions: version 7.13.16 7.14.0 ...

Regex DoS via JQL version searching - CVE-2020-14177

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service DoS vulnerability in JQL version searching. Affected versions: version 7.13.16 8.0.0 ≤ version 8.5.7 8.6.0 ≤ version 8.10.2 8.11.0 ≤ versi...

Regex DoS via JQL version searching - CVE-2020-14177

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service DoS vulnerability in JQL version searching. Affected versions: version 7.13.16 8.0.0 ≤ version 8.5.7 8.6.0 ≤ version 8.10.2 8.11.0 ≤ versi...

CVE-2020-3460

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...

CVE-2020-3384

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...

CVE-2020-3460

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...

CVE-2020-3461

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The vulnerability is due to missing authentication on a specific part of the web-based...

CVE-2020-3462

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could...

CVE-2020-3383

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...