Cisco Prime Collaboration Assurance Default Account Credential Vulnerability

A vulnerability in Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to log in to the system shell with the default cmuser user account and access the shell with a limited set of permissions. The vulnerability is due to an undocumented account that h...

Cisco Warning of CSRF, XSS Vulnerabilities

UPDATE Cisco is warning users this week that several of its products — routers, gateways, and data center platforms — suffer from vulnerabilities, including one critical one. Cisco warned about the most pressing issue, a critical vulnerability in its Prime Collaboration Assurance software, shortl...

Cisco Prime Service Catalog Web Interface Unauthorized Access Vulnerability

A vulnerability in the web interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to perform limited configuration changes. The vulnerability is due to missing access controls in some of the web pages that allow configuration changes. An attacker could exploit th...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

Cisco Prime Collaboration Assurance is a set of enterprise collaboration network management solutions from the U.S. company Cisco Cisco. A cross-site request forgery vulnerability exists in Cisco Prime Collaboration Assurance 10.51 and 10.6. It allows remote attackers to hijack the authentication...

CVE-2015-6330

Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...

CVE-2015-6330

Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...

CVE-2015-6330

Cisco Prime Collaboration Assurance (versions 10.5(1) and 10.6) is affected by a CSRF vulnerability in its web interface due to insufficient CSRF protections. This could allow a remote, unauthenticated attacker to hijack the authentication of arbitrary users by enticing them to visit a crafted li...

CVE-2015-6330: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...

Cisco Network Analysis Module (NAM) Detection (HTTP)

HTTP based detection of the Cisco Network Analysis Module NAM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit...

Cisco Prime Service Catalog WEB Framework SQL Injection Vulnerability

Cisco Prime Service Catalog is a solution for all services offered through a single portal from Cisco, USA. A SQL injection vulnerability exists in the Cisco Prime Service Catalog version 11.0 WEB framework. A remote attacker could execute arbitrary SQL commands via this vulnerability...

Sql injection

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843...

CVE-2015-6350

The CVE-2015-6350 entry concerns Cisco Prime Service Catalog 11.0, where the WEB framework is vulnerable to SQL injection. The root cause is failed validation of user-supplied input used in SQL queries, enabling remote authenticated users to execute arbitrary SQL commands via unspecified vectors....

CVE-2015-6350

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843...

CVE-2015-6350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843...

Cisco Prime Service Catalog SQL Injection Vulnerability

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to execute unauthorized Structured Query Language SQL queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could...

Fewer IPsec VPN Connections at Risk to Weak Diffie-Hellman

A challenge has been made against one of the conclusions in a potentially blockbuster academic paper on cryptographic weaknesses that may be the open door through which intelligence agencies are breaking encrypted connections. The paper, “Imperfect Forward Secrecy: How Diffie-Hellman Fails in...

CVE-2015-6332

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

CVE-2015-6328

The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...