Release Notes for Veeam Backup & Replication 9.5 Update 4b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...

openstack-tripleo-common: Allows running new amphorae based on arbitrary images

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

The vulnerability of the update function of the Cisco Industrial Network Director software arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Industrial Network Director software update function exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

The vulnerability in the web interface of the Cisco Industrial Network Director software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cisco Industrial Network Director software’s web interface exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests...

Cisco Industrial Network Director Remote Code Execution Vulnerability

Cisco Industrial Network Director IND is designed to help operations teams gain a comprehensive understanding of the automated network to improve system availability and increase overall equipment effectiveness OEE. A remote code execution vulnerability exists in the software update feature of...

Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability (CNVD-2019-16842)

Cisco Industrial Network Director IND is designed to help operations teams gain a comprehensive understanding of the automated network to improve system availability and increase overall equipment effectiveness OEE. A cross-site request forgery CSRF vulnerability exists in the web-based managemen...

Cisco Industrial Network Director Cross-Site Scripting Vulnerability (CNVD-2019-16843)

Cisco Industrial Network Director IND is designed to help operations teams gain a comprehensive understanding of the automated network to improve system availability and increase overall equipment effectiveness OEE. A cross-site scripting vulnerability exists in Cisco Industrial Network Director...

Input validation

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit this vulnerability ...

CVE-2019-1882

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by...

CVE-2019-1881

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1882

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by...

CVE-2019-1861

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit this vulnerability ...

Cross site scripting

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by...

CVE-2019-1881

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1861

A vulnerability in the software update feature of Cisco Industrial Network Director could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of files uploaded to the affected application. An attacker could exploit this vulnerability ...

CVE-2019-1881 Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1881 Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1882 Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by...

CVE-2019-1882

The CVE-2019-1882 issue affects Cisco Industrial Network Director. It is a stored XSS vulnerability caused by improper validation of content submitted to the affected application. An authenticated, remote attacker could exploit this by sending requests containing malicious values, enabling stored...

CVE-2019-1882 Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability

A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit this vulnerability by...