CVE-2016-1307

CVE-2016-1307 affects Cisco Finesse Desktop and Cisco Unified Contact Center Express Openfire server. A default, non-changeable XMPP account enables unauthenticated remote login to the Openfire service, allowing access via XMPP with a non-administrative account. Cisco’s advisory Cisco Security Ad...

CVE-2016-1308

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

CVE-2016-1307

The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...

CVE-2016-1308

Cisco Unified Communications Manager (UCM) 10.5 (10.5(2.13900.9)) is affected by a SQL injection vulnerability that arises from lack of input validation in the SQL database interface, allowing an authenticated, remote attacker to execute arbitrary SQL commands via a crafted URL. Public sources ti...

Cisco Unified Computing System Manager and FX-OS for Firepower 9000 Series Remote Code Execution Vulnerability

Cisco Unified Computing System Manager and Cisco FX-OS on Firepower 9000 are both products of the U.S. company Cisco Cisco. The former is a set of embedded device management software, it can be Cisco Unified Computing System as a single, highly usable logical entity, from end to end to manage, th...

CVE-2016-1298

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

CVE-2016-1298

CVE-2016-1298 affects Cisco Unified Contact Center Express (UCCE) up to 11.0(1). The issue is a lack of input validation in the HTTP web-based management interface that handles permalinks, enabling remote attackers to perform cross-site scripting (XSS) by crafting a malicious permalink. This requ...

Cisco Unified Contact Center Express Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. This vulnerability applies to all Permane...

Cisco Unified Computing System Manager Remote Command Execution Vulnerability (cisco-sa-20160120-ucsm)

A vulnerability in a CGI script in the Cisco Unified Computing System UCS Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on the Cisco UCS Manager. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

How do I Configure Unified Gateway for Common Enterprise Applications

This article describes how to configure Unified Gateway for common enterprise applications. Use Case To do AAA and single sign-on for common enterprise applications like SharePoint or Exchange at NetScaler Unified Gateway. Unified Gateway is a single point of access for all corporate applications...

Killchain - A Unified Console To Perform The "Kill Chain" Stages Of Attacks

“Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependant tool sets are: 1 Tor -- For the console build in anonymizer. 2 Set -- Social-Engineer Toolkit SET,...

CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

CVE-2015-6433

CVE-2015-6433 describes an SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225). An authenticated remote user can exploit a crafted URL to execute arbitrary SQL commands on the backend. The issue stems from improper validation of user-supplied input in SQL queries...

CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

Cisco Unified Computing System (UCS) Denial of Service Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of all hardware and software components within a unified computing system. A security vulnerability exists in the SSH management interface of the Fabric Interconnect 6200 appliance. A remote attacker could cause a denial...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2015-08374)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A security vulnerability exists in the Identi...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2015-08391)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager 8.0 through 8.6. It allows remote attackers to bypass XSS protection mechanisms via crafted parameters...