Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

PT-2020-5223

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description The issue is related to errors in access control management in the role-based access control RBAC functionality of the system. This could allow a remote attacker...

PT-2020-3768

Name of the Vulnerable Software and Affected Versions: Cisco Vision Dynamic Signage Director affected versions not specified Description: The issue is related to incorrect permissions within the Apache configuration of the web-based management interface, allowing an unauthenticated, remote attack...

PT-2020-5222

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative...

PT-2020-5226

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative...

Cisco Vision Dynamic Signage Director Unauthorized Access

The vulnerability of the Cisco Vision Dynamic Signage Director web interface management interface is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A SQL vulnerability exists in the Web management interface of Cisco Vision Dynamic Signage Director prior to version 6.2 SP5. The vulnerability stems from the program's failure to correctly...

Sql injection

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

CVE-2020-3450 Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

CVE-2020-3450 Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

CVE-2020-3450: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

PT-2020-3130

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection...

Cisco Vision Dynamic Signage Director REST API Interface Access

The vulnerability of the REST API interface of the Cisco Vision Dynamic Signage Director digital content management system is related to the failure of authentication. Exploiting this vulnerability may allow a malicious actor to gain access to certain parts of the application’s software interface...

Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability

Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...

PT-2020-1655

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an...

REST API interface of Code Execution

The vulnerability of the REST API interface of the Cisco Vision Dynamic Signage Director system is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code with administrator privileges using...

CVE-2019-1917

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

CVE-2019-1917

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...