CVE-2013-5486

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

Design/Logic Flaw

DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029...

CVE-2013-5487

CVE-2013-5487 affects Cisco Prime Data Center Network Manager (DCNM) DCNM-SAN Server prior to version 6.2(1). The vulnerability permits remote attackers to read arbitrary files. Root cause cited in multiple sources is insecure DownloadServlet handling (lack of authentication and insufficient inpu...

CVE-2013-5486

Cisco Prime DCNM DCNM-SAN Server (Cisco Prime DCNM) before 6.2(1) is affected by CVE-2013-5486: a directory traversal in processImageSave.jsp allows remote attackers to write arbitrary files via the chartid parameter, potentially enabling remote code execution through JBoss autodeploy. Affected c...

CVE-2013-5486

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

CVE-2013-5490

Cisco Prime DCNM (DCNM) versions prior to 6.2(1) are affected by CVE-2013-5490 due to an XML External Entity (XXE) vulnerability. An unauthenticated, remote attacker could exploit the XXE flaw to read arbitrary text files on the affected system. This issue is part of a set of vulnerabilities disc...

Cisco Prime Data Center Network Manager Web Detection

The web interface for Cisco Prime Data Center Network Manager DCNM was detected on the remote host. DCNM is used to manage virtualized data centers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67246; scriptversion"1.10";...

Cisco Prime Data Center Network Manager Installed (Linux)

Cisco Prime Data Center Network Manager DCNM is installed on the remote host. DCNM is used to manage virtualized data centers. TRUSTED...

Cisco Prime Data Center Network Manager Installed (Windows)

Cisco Prime Data Center Network Manager DCNM is installed on the remote host. DCNM is used to manage virtualized data centers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67245; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

Cisco Prime Data Center Network Manager RMI Remote Code Execution (uncredentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a remote code execution vulnerability. Unauthorized users have access to the JBoss Application Server Remote Method Invocation services. A remote,...

Cisco Device Manager Command Execution Vulnerability (cisco-sa-20130424-fmdm)

Cisco Device Manager contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands on a client host with the privileges of the user. This vulnerability affects Cisco Device Manager for the Cisco MDS 9000 Family and Cisco Nexus 5000 Series Switches whe...

Cisco Prime Data Center Network Manager code execution

TCP/1099 and TCP/9099 services code execution...

CVE-2013-1196

The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...

CVE-2012-5203

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1613...

CVE-2012-5209

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1659...

CVE-2012-5201

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611...

CVE-2012-5207

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...

CVE-2012-5208

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1615...

CVE-2012-5213

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1662...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1662...