PT-2019-3940

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software affected versions not specified Description The issue is related to the web-based management interface of Cisco Identity Services Engine ISE Software, where an unauthenticated, remote attacker could...

PT-2019-3621

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series affected versions not specified Description The issue is related to errors in checking user requests to the web-based management interface. It could allow a remote attacker to cause a denial of service condition on an...

CVE-2019-15241: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-12708: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to unsafe handling of user credentials. An attacker could explo...

CVE-2019-15244: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-12705: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected...

CVE-2019-15249: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-12702: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the web-based management...

CVE-2019-15269: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. These vulnerabilities are due to insufficient...

PT-2019-3503

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36659)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

CVE-2019-15242: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

PT-2019-3799

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could...

PT-2019-3823

Name of the Vulnerable Software and Affected Versions Cisco SPA122 ATA affected versions not specified Description The issue exists due to insufficient protection of the web page structure in the web-based management interface. An attacker could exploit this by sending specially crafted DHCP...

PT-2019-3937

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center FMC affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC, which could allow an...

CVE-2019-15240: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15270: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...

CVE-2019-15246: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

PT-2019-3496

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series versions affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an attacker to execute arbitrary code with...

PT-2019-3500

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...