The vulnerability in the web interface of the Cisco Prime Home system allows a perpetrator to bypass the authentication process and perform arbitrary actions with administrator privileges.

The vulnerability in the Cisco Prime Home system’s web interface exists due to deficiencies in the authentication process related to role-based access control RBAC errors. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and perform arbitrary actions wit...

CVE-2017-12285

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

Directory traversal

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

Cisco Network Analysis Module Parameter Directory Traversal Arbitrary File Deletion Vulnerability

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that i...

Cisco Policy Suite Software Elevation of Privilege Vulnerability

Cisco Policy Suite CPS Software is a suite of next-generation policy management software from Cisco. The software provides user-based business rules, real-time management of applications and network resources, etc. shell user accounts is one of the account management components. An elevation of...

The vulnerability of the Role-Based Access Control (RBAC) access control function in the data center network management system, Prime Data Center Network Manager, allows a perpetrator to gain access to confidential information or execute arbitrary code.

The vulnerability of the Role-Based Access Control RBAC access control function in the data center network management system, Prime Data Center Network Manager DCNM, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to...

Design/Logic Flaw

A vulnerability in Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are highe...

CVE-2017-6785

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

Cisco Patches Privilege Escalation Bugs in APIC

Cisco patched two high-severity vulnerabilities in its Cisco Application Policy Infrastructure Controller APIC that could allow an attacker to elevate privileges on the host machine. The product automates and manages the APIC fabric, optimizing application performance and provisioning for physica...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability

The Cisco Application Policy Infrastructure Controller is Cisco's robust all-in-one architecture for transport networks. A security vulnerability in the Cisco Application Policy Infrastructure Controller RBAC privilege assignment allows remote attackers to exploit the vulnerability by submitting...

CVE-2017-6785: Improper Input Validation

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

CVE-2017-6781: Improper Authentication

A vulnerability in the management of shell user accounts for Cisco Policy Suite CPS Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level is not at the root level. The vulnerability is due to...

Cisco Unified Communications Manager Horizontal Privilege Escalation Vulnerability

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

A Look at --- SharePoint's Follow Feature XSS(CVE-2017-8514 )

A Look at CVE-2017-8514 --- SharePoint's Follow Feature XSS TL;DR: All your SharePoint installations are belong to us. The XSS worth $2500 affecting both on-premises and online version looks like ... http|https://?FollowSite=0&SiteName='-confirmdocument.domain-' SharePoint needs no more marketing...

Cisco Prime Data Center Network Manager Remote Code Execution Vulnerability

Cisco Prime Data Center Network Manager is a network management application that helps you efficiently implement and manage your virtualized data center. A security vulnerability exists in the Role Based Access Control RBAC feature of Cisco Prime Data Center Network Manager DCNM, which can be...

Design/Logic Flaw

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the...

Cisco Prime Collaboration Provisioning Multiple Directory Traversal Vulnerabilities (May 2017)

cisco prime collaboration provisioning is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Cisco Prime Collaboration Provisioning Software Directory Traversal Vulnerability

Cisco Prime Collaboration Provisioning Software is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A directory traversal vulnerability...

CVE-2017-6636

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

CVE-2017-6637

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...