CVE-2013-1158

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397...

CVE-2013-1157

Technical details about CVE-2013-1157 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-1160

The CVE-2013-1160 entry refers to a Cross-site scripting (XSS) vulnerability in the OpenView web menus of Cisco Prime Central for Hosted Collaboration Solution. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Connected sources confirm the aff...

CVE-2013-1156

CVE-2013-1156 affects Cisco Prime Central for Hosted Collaboration Solution. A directory traversal vulnerability exists due to insufficient path traversal prevention, allowing an unauthenticated remote attacker to read arbitrary files by submitting a crafted URL. Cisco’s advisory states that soft...

CVE-2013-1160

Cross-site scripting XSS vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743...

CVE-2013-1159

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...

CVE-2013-1157

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud51068...

CVE-2013-1158: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397...

CVE-2013-1156: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...

CVE-2013-1160: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743...

CVE-2013-1159: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...

CVE-2013-1157: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud51068...

CVE-2013-1196

The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...

CVE-2013-1196: Improper Input Validation

The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...

Cisco Prime Network Control Systems default account

Default database account...

CVE-2013-1170

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...

Default credentials

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...

CVE-2013-1170

The CVE-2013-1170 issue affects Cisco Prime Network Control System (NCS) appliances running software before 1.1.1.24, where the database user account is created with a default password. This creates a risk that remote attackers could log into the system and either change configuration or cause a ...

CVE-2013-1170

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...

CVE-2013-1170: Undefined Security Weakness

The Cisco Prime Network Control System NCS appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service service disruption via unspecified vectors, aka Bug ID...