Cisco HyperFlex Authorization Control Vulnerability

Cisco HyperFlex Software is a scalable, distributed file system. Cisco HyperFlex has an authorization control vulnerability in the Graphite interface, which can be exploited by a local attacker to write arbitrary data to Graphite and display invalid statistics in that interface by connecting to t...

The vulnerability in the web interface of the Cisco Prime Infrastructure software management tool allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability in the web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web pag...

The vulnerability in the web interface of the Cisco TelePresence Management Suite software allows a perpetrator to execute arbitrary code and expose protected information.

The vulnerability in the web interface of the Cisco TelePresence Management Suite software for centralized control of video systems exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code a...

Vulnerabilities in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allow attackers to execute cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco Prime Infrastructure software for managing network lifecycles allows a perpetrator to execute arbitrary code and expose sensitive information.

The vulnerability in the web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and disclose...

The vulnerability of the web interface of Microprogramming Software Routers Cisco Small Business RV320 and Cisco Small Business RV325 allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the web interfaces of Cisco Small Business RV320 and Cisco Small Business RV325 routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges using a specially crafted HTTP...

CVE-2019-1658

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15459

A vulnerability in the administrative web interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain additional privileges on an affected device. The vulnerability is due to improper controls on certain pages in the web interface. An attacker could explo...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

The vulnerability of the web interface of the Cisco Prime Collaboration Assurance software, a unified communication management tool, allows a perpetrator to perform arbitrary actions on the vulnerable system by manipulating requests across sites.

The vulnerability of the Cisco Prime Collaboration Assurance software interface relates to insufficient authentication of HTTP requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable system by manipulating the requests between sites...

The vulnerability in the web interface of the Cisco Energy Management Suite, related to incorrect restrictions on XML references to external objects (XXE), allows an attacker to disclose or modify sensitive information.

The vulnerability in the web interface of the Cisco Energy Management Suite relates to incorrect restrictions on XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to disclose or modify sensitive information...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows a perpetrator to cause service interruptions or expose sensitive information.

The vulnerability of the web interface of the microprogramming software for Cisco Adaptive Security Appliances and Configure Firepower Threat Defense is related to insufficient checking of HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose...

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

The vulnerability in the web interface of the microprogramming software for Cisco Wireless LAN Controllers of the 5500 series allows a intruder to disclose protected information.

The vulnerability of the web interface of microprogramming software for Cisco Wireless LAN Controllers of the 5500 series arises from insufficient checking of entered URI addresses. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially craft...

The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software for managing unified communications is caused by errors in processing input data, allowing a hacker to re-record files in the file system.

The vulnerability of the Cisco Prime Collaboration Assurance software management interface arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to re-record files in the file system...

The vulnerability in the web interface of the Juniper Networks Junos Space Security Director arises from insufficient protection of the web page structure, allowing attackers to disclose sensitive information or perform actions on behalf of other users.

The vulnerability of the Juniper Networks Junos Space Security Director administrative interface arises due to insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform actions on behalf of other users...

Cisco Energy Management Suite XML External Entity Injection Vulnerability

Cisco Energy Management Suite is the United States Cisco Cisco company's set of energy management suite. The product is mainly used to manage network equipment such as energy management. An XML external entity injection vulnerability exists in the web-based user interface of the Cisco Energy...

The vulnerability of the REST API interface of the FortiOS operating system allows a perpetrator with the “read-only” privilege to disclose administrator passwords with the “read-write” privilege.

The vulnerability of the REST API interface of the FortiOS operating system is caused by access control errors. Exploiting this vulnerability allows a malicious actor, who operates remotely and has privileges for “only reading”, to obtain information about administrator passwords with privileges...

The vulnerability of the web interface of the microprogramming software for Cisco RV110W Wireless-N VPN and the multifunctional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of Microprogramming Software for Cisco RV110W Wireless-N VPN and Multi-Function VPN Routers such as Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN lies in insufficient cleaning of input data used during command generation. Exploiting this...