Cisco Prime Optical for Service Providers Information Disclosure Vulnerability

Cisco Prime Optical is a suite of products offered to service providers to manage converged IP and optical transport networks. It supports auto-configuration, resource allocation and troubleshooting to help operators perform end-to-end circuit creation more efficiently. An information disclosure...

Cisco Prime Infrastructure Security Bypass Vulnerability

Cisco Prime Infrastructure PI is a product of Cisco USA.PI is a set of wireless management solutions through Cisco Prime LAN Management Solution LMS and Cisco Prime Network ControlSystem NCS technologies. PI is a wireless management solution through Cisco Prime LAN Management Solution LMS and Cis...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CNVD-2017-03681)

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single web portal. The solution supports automated ordering of computing, networking, storage, and other data center resources in a unified service catalog. web framework is one of the...

CVE-2017-3871

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

Cross site scripting

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

Design/Logic Flaw

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2017-3869

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...

CVE-2017-3871

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

CVE-2017-3869

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...

Design/Logic Flaw

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...

CVE-2017-3871

CVE-2017-3871 affects Cisco Prime Optical for Service Providers. A RADIUS Secret Disclosure vulnerability exists in the web network management interface that could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker m...

CVE-2017-3869

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...

CVE-2017-3871

A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for t...

CVE-2017-3869

CVE-2017-3869 affects Cisco Prime Infrastructure APIs. The issue arises from insufficient RBAC, allowing an authenticated, low-privilege user to access APIs that should be restricted to higher-privilege users, potentially viewing or modifying system configuration. Affected releases are noted as 3...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

CVE-2017-3866

Cisco Prime Service Catalog exposes a cross-site scripting (XSS) vulnerability in its web framework. An unauthenticated, remote attacker could leverage insufficient input validation of web parameters to execute arbitrary scripts in a user’s browser. Affected release includes 11.1.2. The Cisco adv...

CVE-2017-3866: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

CVE-2017-3869: Undefined Security Weakness

An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...