Lucene search
+L

1768 matches found

Tenable Nessus
Tenable Nessus
added 2024/04/05 12:00 a.m.40 views

Cisco TelePresence Management Suite XSS (cisco-sa-tms-xss-kGw4DX9Y)

According to its self-reported version, Cisco TelePresence Management Suite Cross-Site Scripting is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site...

5.5CVSS5.8AI score0.0038EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/03 5:15 p.m.11 views

CVE-2024-20334

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

5.4CVSS6AI score0.0038EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/03 5:15 p.m.36 views

CVE-2024-20334

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

5.5CVSS5.3AI score0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/03 4:24 p.m.14 views

CVE-2024-20334

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

5.5CVSS6AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/03 4:24 p.m.77 views

CVE-2024-20334

CVE-2024-20334 affects Cisco TelePresence Management Suite (TMS) web-based management interface. Vulnerability arises from insufficient input validation in the interface, enabling a low-privileged, remote attacker to perform cross-site scripting (XSS). A successful exploit could execute arbitrary...

5.5CVSS6AI score0.0038EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/03 4:24 p.m.33 views

CVE-2024-20334

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

5.5CVSS5.5AI score0.0038EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/04/03 4:00 p.m.74 views

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based...

5.5CVSS5.3AI score0.0038EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.17 views

Cisco TelePresence Management Suite 安全漏洞

Cisco TelePresence Management Suite TMS is a management suite of videoconferencing solutions from Cisco USA. The product is primarily used for deploying large-scale remote and local videoconferencing and provides contact management and centralized configuration management. A security vulnerabilit...

5.5CVSS6.5AI score0.0038EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/02/20 12:00 a.m.15 views

Cisco TelePresence Video Communication Server (VCS) Detection Consolidation

Consolidation of Cisco TelePresence Video Communication Server VCS detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/02/16 12:00 a.m.10 views

The vulnerability of the application programming interface of Cisco Expressway Series and Cisco Telepresence VCS devices allows a attacker to perform a CSRF attack.

The vulnerability of the application programming interface of Cisco Expressway Series and Cisco Telepresence VCS devices is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

10CVSS7.6AI score0.00805EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/09 12:00 a.m.13 views

The vulnerability of the application software interface of Cisco Expressway Series and Cisco Telepresence VCS devices allows a perpetrator to execute arbitrary commands.

The vulnerability of the application software interface of Cisco Expressway Series and Cisco Telepresence VCS devices is related to the manipulation of inter-domain requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by redirecting the user’s attention...

10CVSS8.1AI score0.00846EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/09 12:00 a.m.49 views

Cisco Expressway Series XSRF (cisco-sa-expressway-csrf-KnnZDMj3)

According to its self-reported version, Cisco Expressway Series is affected by multiple vulnerabilities. - A vulnerability in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF...

9.6CVSS7.8AI score0.00846EPSS
SaveExploits0References7
OSV
OSV
added 2024/02/07 5:15 p.m.10 views

CVE-2024-20254

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers...

8.8CVSS5.9AI score0.00805EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/07 5:15 p.m.26 views

CVE-2024-20254

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers...

9.6CVSS9.7AI score0.00805EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/07 5:15 p.m.5 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

7.1CVSS5.7AI score0.00603EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/07 5:15 p.m.34 views

CVE-2024-20252

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers...

9.6CVSS9.7AI score0.00846EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/07 5:15 p.m.32 views

Cross site request forgery (csrf)

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks that perform arbitrary actions on an affected device. Note: "Cisco Expressway Series" refers...

6.8CVSS7.6AI score0.00846EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/02/07 5:15 p.m.35 views

Cross site request forgery (csrf)

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

5.8CVSS7.5AI score0.00603EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/07 4:15 p.m.12 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

8.2CVSS8.3AI score0.00603EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/07 4:15 p.m.51 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

8.2CVSS8.5AI score0.00603EPSS
SaveExploits0References1
Rows per page
Query Builder