CVE-2020-3546

CVE-2020-3546 affects Cisco Email Security Appliance (ESA) running Cisco AsyncOS. The issue stems from insufficient validation of requests to the web-based management interface, allowing an unauthenticated, remote attacker to access sensitive information. Exploitation could disclose IP addresses ...

CVE-2020-3546 Cisco Email Security Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-info-disclosure-vMJMMgJ)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by an information disclosure vulnerability in the web-based management interface, due to insufficient validation of requests sent to it. An unauthenticated, remote attacker can exploit this, by sending speciall...

CVE-2020-3547: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to access sensitive information on an affecte...

CVE-2020-3546: Improper Input Validation

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...

Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information about these vulnerabilities, s...

Cisco Prime Infrastructure Cross-Site Scripting (cisco-sa-20191002-pi-xss-12713)

According to its self-reported version, Cisco Prime Infrastructure is affected by a cross site scripting vulnerability. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this...

Cisco Prime Infrastructure Cross-Site Scripting (cisco-sa-20191002-pi-xss-12712)

According to its self-reported version, Cisco Prime Infrastructure is affected by a cross-site scripting vulnerability. The vulnerability is due to insufficient validation of user-supplied input in multiple sections of the web-based management interface of the affected software. An attacker could...

Cisco Data Center Network Manager Stored XSS (cisco-sa-dcnm-xss-stored-w4rJZJtO)

According to its self-reported version, Cisco Data Center Network Manager is affected by a vulnerability in the web-based management interface due to insufficient input validation. An authenticated, remote attacker can exploit this, by inserting malicious data into a specific data field in the...

Exploit for Cross-Site Request Forgery (CSRF) in Rad Secflow-1V_Firmware

CVE-2020-13259 PoC of Full Account Takeover on RAD SecFlow-1v...

Cisco Small Business Routers Command Shell Injection (cisco-sa-cmd-shell-injection-9jOQn9Dy)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by a command shell injection vulnerability in the web-based management interface due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a...

CVE-2020-3518

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of the affected software. The vulnerability exists because the...

CVE-2020-3491

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficient input validation by the...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerabilities exist because the web-based managemen...

CVE-2020-3439

CVE-2020-3439 affects Cisco Data Center Network Manager (DCNM) web-based management interface. A stored XSS vulnerability arises from insufficient input validation in a data field, enabling an authenticated, remote attacker to inject script and potentially access browser-based information. Impact...

CVE-2020-3466 Cisco DNA Center Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerabilities exist because the web-based managemen...

CVE-2020-3484 Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacke...

CVE-2020-3484 Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacke...