CVE-2021-25656

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 without hotfix and 8.0.0 without hotfix...

CVE-2021-25656

CVE-2021-25656 refers to stored XSS vulnerabilities in the Avaya Aura Experience Portal Web management interface. The issue is exploitable by an authenticated user and could disclose sensitive information. Affected versions are 7.0–7.2.3 (without hotfix) and 8.0.0 (without hotfix). The available ...

CVE-2021-25656 Avaya Aura Experience Portal XSS vulnerabilities

Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 without hotfix and 8.0.0 without hotfix...

ArubaOS-Switch Multiple Vulnerabilities (ARUBA-PSA-2020-007)

The version of ArubaOS-Switch installed on the remote host is 16.08. prior to version 16.08.0009, 16.09. prior to 16.09.0007 or 16.10. prior to 16.10.0003. It is, therefore, affected by multiple vulnerabilities, as follows: - A vulnerability in the Web Management Interface allows an attacker to...

Weak Password Vulnerability in the web management platform of China Control Time & Attendance Machine

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. A weak password vulnerability exists in the web-based management platform of ZhongControl Time and Attendance Machine, which c...

Arbitrary File Download Vulnerability in Web Management Platform of Time Attendance Machine of China Control

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. An arbitrary file download vulnerability exists in the web management platform of ZhongControl Attendance Machine, which can b...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2021-45150)

Cisco Unified Intelligence Center provides a control panel-based canvas for organizing multiple report objects together, giving you comprehensive contact center statistics at a glance. A reflected cross-site scripting vulnerability exists in the Web management interface of Cisco Unified...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

PT-2021-3723 · Cisco · Cisco Small Business 220 Series Smart Switches

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: The issue concerns multiple vulnerabilities in the web-based management interface, potentially allowing an attacker to hijack a user session, execute...

SQL Injection Vulnerability in ForU CMS (CNVD-2021-45390)

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

SQL Injection Vulnerability in ForU CMS (CNVD-2021-45391)

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

FortiWLC - Improper access control

An improper access control CWE-284 vulnerability in FortiWLC may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the...

Citrix ADC Authentication Bypass (CTX261055)

An authentication bypass vulnerability exists in Citrix Application Delivery Controller ADC. An unauthenticated, remote attacker can exploit this, via the web management interface, to bypass authentication and gain administritive access to the appliance. Note that Nessus has not attempted to...

CVE-2021-1549

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1358

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected system. A...

Input validation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

Command injection

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

Cisco Finesse 输入验证错误漏洞

Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. An open redirection vulnerability exists in the Web management interface of Cisco Finesse 12.61 and...

Cisco Finesse 跨站脚本漏洞

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a cross-site scripting vulnerability where the web-based management interface of the affected software fails to adequately validate user-supplied input. An attacker could use th...

SQL Injection Vulnerability in web management interface of Aifei Flow Control Route.

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technology service, technology consulting, technology transfer, technology promotion and so on. SQL injection...