1589 matches found
CVE-2014-3275
SQL injection vulnerability in the web framework in Cisco Identity Services Engine ISE 1.2.1 patch 2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337...
CVE-2014-3266
Cross-site scripting XSS vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189...
PT-2014-5163
Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 4.6 and earlier Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes...
CVE-2014-3275: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web framework in Cisco Identity Services Engine ISE 1.2.1 patch 2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337...
CVE-2014-3267: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427...
CVE-2014-3266: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189...
PT-2014-5162
Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 4.6 and earlier Description A cross-site scripting XSS issue exists in the web framework, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Recommendations For versio...
Cisco Identity Services Engine Blind SQL Injection Vulnerability
A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to impact the integrity and availability of the affected system by executing arbitrary SQL queries. The vulnerability is due to a failure to validate user-supplied input in SQL...
Cisco Security Manager Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient input validation of a parameter. An attacker could exploit this...
Cisco Security Manager Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of Cisco Security Manager could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...
CVE-2014-3265
Cross-site scripting XSS vulnerability in the Auto Update Server AUS web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900...
Cross site scripting
Cross-site scripting XSS vulnerability in the Auto Update Server AUS web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900...
CVE-2014-3265
Cross-site scripting XSS vulnerability in the Auto Update Server AUS web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900...
PT-2014-5161
Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 4.2 and earlier Description A cross-site scripting XSS issue exists in the Auto Update Server AUS web framework, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter...
Cisco Security Manager AUS Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient input validation of a parameter, which affects the Auto Update...
Cisco Broadcast Access Center for Telco and Wireless Cross-Site Scripting Vulnerability
A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the Cisco BAC-TW web interface. The vulnerability is due to insufficient input...
Cisco Broadcast Access Center for Telco and Wireless Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the Cisco BAC-TW web interface. The vulnerability is due to insufficient CSRF...
CVE-2014-2191
Cross-site scripting XSS vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113...
CVE-2014-2191
Cross-site scripting XSS vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113...
CVE-2014-2190
Cisco BAC-TW’s web framework suffers a CSRF vulnerability where an unauthenticated attacker can trick an authenticated user into performing changes on the BAC-TW interface. The issue stems from insufficient CSRF protections, enabling cross-site requests that may modify BAC-TW settings. Cisco’s ad...