PT-2020-1575

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager UCM affected versions not specified Description A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a...

PT-2020-1436

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection Software affected versions not specified Description The issue is related to insufficient input validation in the web-based management interface, which could allow a remote attacker to perform a stored cross-site scripti...

PT-2020-1639

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller APIC versions prior to 4.23j Description A vulnerability in the out of band OOB management interface IP table rule programming could allow an unauthenticated, remote attacker to bypass...

PT-2020-1433

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view sensitive information due to insufficient protection o...

PT-2020-1653

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest versions 11.12 and earlier Description A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2020-1647

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection affected versions not specified Description A vulnerability in the web management interface of Cisco Unity Connection exists due to insufficient input validation, allowing an authenticated remote attacker to overwrite...

PT-2020-1646

Name of the Vulnerable Software and Affected Versions Cisco Small Business Smart and Managed Switches affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2020-1648

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA exists due to improper validation of user-supplied input. This could all...

Cisco Firepower Threat Defense Software WebVPN XSS (cisco-sa-20191002-asa-xss)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Firepower Threat Defense Software FTD allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

The vulnerability of the REST Interface Version 2 interface of the SAP Identity Management tool allows a perpetrator to elevate their privileges.

The vulnerability of the REST Interface Version 2 interface of the SAP Identity Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2014-2650

The CVE concerns Unify OpenStage / OpenScape Desk Phone IP (pre-V3 R3.11.0) where the web-based management interface is vulnerable to OS command injection. Root cause is improper handling of input in the management UI, enabling an attacker to execute arbitrary commands on the device. CVSS data in...

PT-2020-7628

Name of the Vulnerable Software and Affected Versions Unify OpenStage / OpenScape Desk Phone IP versions prior to V3 R3.11.0 Description The issue concerns an OS command injection vulnerability in the web-based management interface of the affected device. Recommendations For versions prior to V3...

CVE-2014-2650: Improper Neutralization of Special Elements used in an OS Command

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2020-03722)

Cisco Finesse is a next-generation agent and supervisor desktop designed to enhance the customer service experience in contact centers. A cross-site scripting vulnerability exists in the Web management interface in Cisco Finesse that stems from the software's failure to clean up incoming requests...

Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of some parameters that are passed...

PT-2020-1652

Name of the Vulnerable Software and Affected Versions Cisco Crosswork Change Automation affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct...

PT-2020-1651

Name of the Vulnerable Software and Affected Versions Cisco Data Center Analytics Framework affected versions not specified Description A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to...

PT-2020-1431

Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to download system log files from an affected device. The issue is due to a...

PT-2020-1375

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The issue is due to...

PT-2020-1656

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to bypass authorization and access sensitive information related...