CVE-2022-20635: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06386)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which stem...

CVE-2022-20644: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2022-20640: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

GitLab code issues and vulnerabilities

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab has a code issue vulnerability that originates from an improperly...

CVE-2022-20639

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2022-20658

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an attacker to conduct a path traversal attack on an affected device or conduct a cross-site scripting XSS attack against a user of the...

Cisco Prime Access Registrar Appliance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Access Registrar Appliance could allow an authenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. The attacker would require valid credentials for the device. This vulnerability i...

Cisco Security Manager Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

PT-2022-1435

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. An attacker could...

PT-2022-1446

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface of Cisco Security Manager, allowing an unauthenticated, remote...

Cisco Unified Contact Center Management Portal and Cisco Unified Contact Center Domain Manager have security vulnerabilities

Cisco Unified Contact Center Management Portal and Cisco Unified Contact Center Domain Manager are both products of Cisco Corporation. Management Portal is an intuitive and secure Web-based application that allows supervisors and managers to meet the complex and changing demands of the contact...

PT-2022-1418

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. An attacker could...

PT-2022-1419

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct cross-site...

PT-2022-1437

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. This could enable a...

PT-2022-1427

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Security Manager. These vulnerabilities are due to insufficient validation of...

PT-2022-1432

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. This could enable a...

PT-2022-2287

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Security Manager. These vulnerabilities could allow an unauthenticated, remote...

PT-2022-1443

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. An attacker could...