Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise have cross-site scripting vulnerabilities

Cisco Unified Contact Center Enterprise and Cisco Packaged Contact Center Enterprise are both products of the American company Cisco. Cisco Unified Contact Center Enterprise is a unified contact center solution. Cisco Packaged Contact Center Enterprise is a customer contact center system. Both...

PT-2026-3789

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-base...

PT-2026-3070

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows attackers to carry out XSS attacks.

The vulnerability of the Cisco Identity Services Engine ISE web interface and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious act...

The vulnerability in the web interfaces of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Web interfaces of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious...

PT-2025-46693

Name of the Vulnerable Software and Affected Versions IBM OpenPages versions 9.0 through 9.1 Description IBM OpenPages versions 9.0 and 9.1 have a security issue that could lead to the disclosure of sensitive information. This is due to insufficient security measures on certain REST API endpoints...

EUVD-2025-37885

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

EUVD-2020-22045

Malware in sbrugna...

EUVD-2018-18801

Malware in sbrugna...

EUVD-2021-19970

Malware in sbrugna...

EUVD-2004-0671

Malware in sbrugna...

EUVD-2014-5218

Malware in sbrugna...

EUVD-2019-7864

Malware in sbrugna...

EUVD-2007-5514

Malware in sbrugna...

Vulnerability of Cisco IOS operating system web interfaces, allowing attackers to trigger maintenance failures

The vulnerability of Cisco IOS operating system web interfaces is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via improper permission checks in the import and export tasks. An attacker can gain unauthorized access to exported data by sending crafted requests to the REST APIs. Remediation Upgrade...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the gRPC API and HTTP APIs, which allow peers to send requests that cause the recipient to create files in arbitrary file system locations and read arbitrary files. An attacker can access sensitive data or execu...

The vulnerability of web-service interfaces of microprogramming-based network interface controllers from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of web-service interfaces of microprogramming-based network interface controllers from Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to buffer overflow attacks due to integer overflows. Exploitation of this vulnerability could allow a...

CVE-2025-47812

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...