CVE-2013-5445: Undefined Security Weakness

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key...

CVE-2013-5443: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5444: Undefined Security Weakness

The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors...

Cisco Unified Contact Center Express Serviceability Page CSRF Vulnerability

A vulnerability in the Cisco Unified Serviceability component of Cisco Unified Contact Center Express Cisco Unified CCX could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could...

Cisco Unified Contact Center Express DRS Sensitive Information Disclosure Vulnerability

A vulnerability in the disaster recovery system DRS of Cisco Unified Contact Center Express Cisco Unified CCX could allow an authenticated, remote attacker to acquire sensitive information about DRS-related devices. The vulnerability is due to extraneous information included in the web page. An...

Cisco Unified Contact Center Express CCMConfig Sensitive Information Disclosure Vulnerability

A vulnerability in the CCMConfig page of Cisco Unified Contact Center Express Cisco Unified CCX could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to the presence of sensitive information in the CCMConfig page. An attacker could exploit this...

CVE-2014-0746

The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...

CVE-2014-0745

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-2102

Cisco Unified Contact Center Express Unified CCX does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575...

CVE-2014-2102

Cisco Unified Contact Center Express (Unified CCX) CCMConfig page contains sensitive information that can be accessed by an authenticated, remote attacker. The issue arises from improper content restriction on CCMConfig, enabling information disclosure. Cisco advisories state no software updates ...

CVE-2014-0745

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-0746

CVE-2014-0746 affects Cisco Unified Contact Center Express (Unified CCX) Disaster Recovery System (DRS). The issue is an information disclosure: extraneous fields on a DRS web page allow an authenticated, remote attacker to obtain sensitive device information. Root cause is inclusion of sensitive...

CVE-2014-0746

The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...

CVE-2014-2102: Undefined Security Weakness

Cisco Unified Contact Center Express Unified CCX does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575...

PT-2014-3808

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description A cross-site request forgery CSRF issue in the Unified Serviceability subsystem allows remote attackers to hijack the authentication of arbitrary user...

PT-2014-4484

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by examining the content of the CCMConfig page, due to improper restrictio...

PT-2014-3809

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description The issue in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information. This is due to the...

CVE-2014-0745: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-0746: Exposure of Sensitive Information to an Unauthorized Actor

The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...

CVE-2014-1467: Undefined Security Weakness

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise...