CVE-2017-3886

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

CVE-2017-6601

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

CVE-2017-3886

CVE-2017-3886 maps to Cisco Unified Communications Manager SQL Injection via the web interface. The vulnerability is triggered by an authenticated administrative user who can execute arbitrary SQL queries, potentially compromising confidentiality. Affected releases include 1.0(1.10000.10) and 11....

CVE-2017-6600

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...

CVE-2017-3886

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

CVE-2017-3888

The CVE-2017-3888 entry concerns Cisco Unified Communications Manager (CUCM) and describes a reflected cross-site scripting (XSS) vulnerability in the web-based management interface. The issue requires an authenticated administrator and can lead to script execution in the browser of a user access...

CVE-2017-6602

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

CVE-2017-3817

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

CVE-2017-3888

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

Multiple Huawei Firewall USG Series Products Cross-Site Request Forgery Vulnerabilities

Huawei USG9500 and others are firewall products from Huawei China. A cross-site request forgery vulnerability exists in multiple Huawei Firewall USG Series products. A remote attacker can exploit this vulnerability to perform unauthorized operations...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170405-ucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attac against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbone...

Cisco UCS Manager CLI Command Injection Vulnerabilities (cisco-sa-20170405-cli1, cisco-sa-20170405-cli2)

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager could allow an authenticated, local attacker to perform a command injection attack. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Cisco Unified Communications Manager SQL Injection Vulnerability (cisco-sa-20170405-ucm)

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The attacker must be authenticated as an administrative user to execute SQL database queries...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2017-04874)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. Cisco Unified Communications Manager suffers...

Local Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-04873)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A local command injection vulnerability exists in Cisco Unified Communications Manager, which could be exploited by a local attacker to submit a special request and execute arbitrary shell commands...

Cisco Unified Computing System Director Information Disclosure Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to deploy and...

Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The attacker must be authenticated as an administrative user to execute SQL database queries. The...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

AlienVault OSSIM/USM < 5.3.6 RCE Vulnerability - Active Check

AlienVault OSSIM and USM are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...