CVE-2019-20407

CVE-2019-20407 affects Jira Software and Jira Software Data Center (ConfigureBambooRelease resource) prior to version 8.6.1. An authenticated remote attacker can view release version information in projects to which they should not have access due to a missing authorization check. The issue is do...

The vulnerability of the REST API interface of the Cisco Data Center Network Manager (DCNM) system allows a perpetrator to increase their privileges.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to privilege management errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) system allows a perpetrator to perform arbitrary actions on the vulnerable device.

The vulnerability in the Web interface of the Cisco Data Center Network Manager DCNM system is related to the lack of protection against Cross-Site Request Forgery CSRF attacks. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device using a...

Huawei NIP6800, Secospace USG6600 and USG9500 Denial of Service Vulnerabilities (CNVD-2020-22011)

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A denial of service vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

Huawei NIP6800, Secospace USG6600 and USG9500 Denial of Service Vulnerabilities

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A denial of service vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500. An attacker could...

Huawei NIP6800, Secospace USG6600 and USG9500 Information Disclosure Vulnerabilities

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An information disclosure vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500. A local...

Cisco Prime Data Center Network Manager Remote Code Execution (CVE-2019-1620)

A remote code execution vulnerability exists in Cisco Prime Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the Cisco Data Center Network Manager, a system for network management at data centers, allows a malicious individual to gain unauthorized access to JBoss EAP.

The vulnerability of the Cisco Data Center Network Manager system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to JBoss EAP from a remote location...

The vulnerability in the web interface of the Cisco Data Center Analytics Framework allows a perpetrator to execute arbitrary code in the context of the current user or disclose protected information.

The vulnerability in the web interface of the Cisco Data Center Analytics Framework exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to disclos...

Huawei NIP6800, Secospace USG6600 and USG9500 Invalid Pointer Access Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An invalid pointer access vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-13203)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A stored cross-site scripting vulnerability exists in the Web management interface...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

Cisco Data Center Network Manager elevation of privilege vulnerability (CNVD-2020-10705)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An elevation of privilege vulnerability exists in the REST API endpoint of Cisco...

Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10707)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site request forgery CSRF vulnerability exists in the Web management...

CVE-2020-3114

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based...

CVE-2020-3112

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this vulnerability by...

CVE-2020-3114

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based...

CVE-2020-3113

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2020-3113

CVE-2020-3113 affects Cisco Data Center Network Manager (DCNM) web-based management interface. The vulnerability arises from insufficient validation of user-supplied input, enabling stored XSS when a user is enticed to click a crafted link. Impact could be execution of arbitrary script in the int...

CVE-2020-3112

CVE-2020-3112 is a privilege-escalation vulnerability in Cisco Data Center Network Manager (DCNM) REST API. The issue stems from insufficient access control validation, allowing an authenticated, low-privilege user to send crafted API requests and interact with the API with administrative privile...