Cisco Content Security Management Appliance Open Redirect Multiple Vulnerabilities (cisco-sa-sma-opn-rdrct-yPPMdsMQ)

According to its self-reported version, Cisco Content Security Management Appliance SMA is affected by multiple vulnerabilities in the web-based GUI due to improper input validation of the parameters of an HTTP request. An unauthenticated, remote attacker can exploit these, by intercepting an HTT...

The vulnerability of the graphical interface of the Cisco Content Security Management Appliance allows attackers to redirect users to arbitrary websites and carry out phishing attacks using specially crafted URLs.

The vulnerability of the graphical interface of the Cisco Content Security Management Appliance software for content management systems involves the redirection of URLs to insecure websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry o...

CISO stress-busters: post #1 overcoming obstacles

As part of the launch of the U.S. space program’s moon shot, President Kennedy famously said we do these things “not because they are easy, but because they are hard.” The same can be said for the people responsible for security at their organizations; it is not a job one takes because it is easy...

CVE-2020-3178

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

CVE-2020-3178

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

Open redirect

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

CVE-2020-3178 Cisco Content Security Management Appliance Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

CVE-2020-3178 Cisco Content Security Management Appliance Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

Cisco Content Security Management Appliance Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...

EMC RSA Authentication Manager < 8.4 P11 XSS Vulnerability (DSA-2020-066)

The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4 Patch 11. It is, therefore, affected by stored cross-site scripting vulnerability in the Security Console. A authorized remote user could exploit this vulnerability to store arbitrary HTML or JavaScript code...

The vulnerability of the message filtering function of Cisco AsyncOS software in Cisco Email Security Appliances and Cisco Content Security Management Appliances, as well as in Cisco Web Security Appliances, allows attackers to trigger service interruptions.

The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances, Cisco Content Security Management Appliances, and Cisco Web Security Appliances is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to...

McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-21065)

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee Network Security Management 9.1 and prior version...

McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-20985)

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee NSM versions prior to 9.1. The vulnerability stem...

CVE-2020-7258

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7258

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

Cross site scripting

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256 Network Security Management (NSM) - Cross site scripting vulnerability

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...

CVE-2020-7256

The CVE-2020-7256 entry concerns a Cross-Site Scripting vulnerability in McAfee Network Security Management (NSM) prior to version 9.1. The available connected documents confirm the affected product (NSM) and the vulnerability class (XSS) but do not provide concrete exploit vectors, affected comp...

CVE-2020-7258 Network Security Management (NSM) - Cross site scripting vulnerability

Cross site scripting vulnerability in McAfee Network Security Management NSM Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors...