Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller IMC could allow a remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. For more information about these vulnerabilities, see the Details "details"...

IBM QRadar SIEM Cross-site Scenario Attacks

The vulnerability of the IBM QRadar SIEM event collection and analysis web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2026-20151: Insertion of Sensitive Information Into Sent Data

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to the improper transmission of sensitive user information. An attacker could exploit this...

WatchGuard Firebox Fireware OS security vulnerabilities

WatchGuard Firebox Fireware OS is an operating system developed by the American company WatchGuard, designed to provide security protection and traffic control capabilities for firewall devices. Vulnerabilities exist in versions 12.6.1 to 12.11.8, as well as in versions 2025.1 to 2026.1.2 of...

Cisco Integrated Management Controller (IMC) buffer error vulnerability

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco, Inc., used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as powering on, powering off, and restarting servers. The Cisco IMC has...

PT-2026-29560

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. A...

PT-2026-29642

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2026-29558

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary commands as the root use...

PT-2026-29553

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that could allow a remote attacker with administrative privileges to perform a stored cross-site scripting XSS attack agains...

Cisco Integrated Management Controller (IMC) cross-site scripting vulnerabilities

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco Corporation in the United States, used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as starting, stopping, and restarting server...

PT-2026-29554

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that could allow a remote attacker with administrative privileges to perform a stored cross-site scripting XSS attack agains...

PT-2026-29552

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC due to insufficient validation of user input. This could allow an authenticated, remote attacke...

PT-2026-29559

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that could allow a remote attacker with admin-level privileges to inject commands and execute...

Cisco Integrated Management Controller (IMC) cross-site scripting vulnerabilities

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco, Inc., used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as powering on, powering off, and restarting servers. The Cisco IMC has...

Cisco Integrated Management Controller Cross-Site Script Vulnerability

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco, Inc., used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as powering on, powering off, and restarting servers. The Cisco IMC has...

PT-2026-29555

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that may allow a remote attacker with administrative privileges to perform a stored Cross-Site Scripting XSS attack against ...

PT-2026-29561

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to the improper transmission of sensitive user information. An attacker could exploit this...

Cisco Integrated Management Controller (IMC) cross-site scripting vulnerabilities

The Cisco Integrated Management Controller IMC is a set of software developed by Cisco, Inc., used for managing UCS Unified Computing System environments. This software supports HTTP and SSH access, and allows operations such as powering on, powering off, and restarting servers. The Cisco IMC has...

PT-2026-29551

Name of the Vulnerable Software and Affected Versions Cisco IMC affected versions not specified Description A flaw exists in the web-based management interface of Cisco IMC that could allow a remote attacker to perform a reflected cross-site scripting XSS attack against a user. This is caused by...

TOTOLINK X5000R DoS

The vulnerability of the web interface of TOTOLINK X5000R router microprogramming software is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created POST request...