CVE-2016-1390

Cisco Prime Network Analysis Module (NAM) and Cisco Prime Virtual Network Analysis Module (vNAM) are affected by CVE-2016-1390. The issue arises from insufficient sanitization of CLI input, allowing a local, authenticated attacker to obtain root privileges by crafting input that is processed by t...

CVE-2016-1391

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

CVE-2016-1391: Improper Input Validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

CVE-2016-1390: Improper Input Validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...

CVE-2016-1388

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

CVE-2016-1388

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

Input validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

CVE-2016-1388

CVE-2016-1388 affects Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM). Affected versions allow remote attackers to execute arbitrary OS commands via a crafted HTTP request due to improper input handling. Exploitation status is not detailed in the provide...

CVE-2016-1370: Improper Input Validation

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

Cisco Prime Network Analysis Module Remote Code Execution Vulnerability (CNVD-2016-03804)

The Cisco Prime Network Analysis Module is a network analysis module that is part of the overall Cisco Prime solution. A remote code execution vulnerability exists in the web interface of Cisco NAM/vNAM. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary...

CVE-2016-1388: Improper Neutralization of Special Elements used in a Command

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

Cisco Prime Network Analysis Module Authenticated Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Prime Network Analysis Module NAM and Cisco Prime Virtual Network Analysis Module vNAM could allow an authenticated, remote attacker to execute arbitrary commands or code on the host operating system with the privileges of the web server. The...

Cisco Prime Network Analysis Module Local Command Injection Vulnerability

A vulnerability in the command-line interface CLI of Cisco Prime Network Analysis Module NAM and Cisco Prime Virtual Network Analysis Module vNAM could allow a local, authenticated attacker to execute arbitrary commands on the host operating system with elevated privileges. The vulnerability is d...

Cisco Network Analysis Module (NAM) Detection (HTTP)

HTTP based detection of the Cisco Network Analysis Module NAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Network Analysis Module Detection (SSH Login)

SSH login-based detection of Cisco Network Analysis Module. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Network Analysis Module Cross-Site Scripting Vulnerability

Cisco is a leading global provider of networking solutions. A cross-site scripting vulnerability exists in Cisco Network Analysis Module due to a failure to adequately validate input. An attacker could exploit the vulnerability by convincing a NAM user to visit a malicious Web site...

CVE-2015-0656: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login page in Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269...

Cisco Network Analysis Module Cross-Site Scripting Vulnerability

A vulnerability in the login page of the Cisco Network Analysis Module NAM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by convincing the NAM us...

Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability

Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a Network Analysis Module installed are affected by a vulnerability, which could allow an attacker to gain complete control of the system. Only Cisco Catalyst systems that have a NAM on them are affected. This vulnerability affects...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 PreSearch.html and 2 PreSearch.class in Cisco Secure Access Control Server ACS, VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage...