CVE-2020-3523 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

CVE-2020-3523

The CVE-2020-3523 entry concerns Cisco Data Center Network Manager (DCNM). The connected documents confirm a cross-site scripting (XSS) vulnerability in the DCNM web-based management interface, exploitable by an authenticated, remote attacker who can lure a user into clicking a crafted link. The ...

CVE-2020-3523 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

CVE-2020-3522: Improper Access Control

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to bypass authorization on an affected device and access sensitive information that is related to the device. The vulnerability exists because the...

CVE-2020-3484: Incorrect Default Permissions

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacke...

CVE-2020-3490: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability...

CVE-2020-3523: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

CVE-2020-3518: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of the affected software. The vulnerability exists because the...

CVE-2020-3491: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

CVE-2020-3466: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerabilities exist because the web-based managemen...

CVE-2020-7824

CVE-2020-7824 affects Ericsson iPECS web-based management interface. The issue arises from insecure permission handling of session cookies, enabling an authenticated, remote attacker to modify a cookie value and obtain administrator privileges. Reported impact includes access to sensitive device ...

PT-2020-19820

Name of the Vulnerable Software and Affected Versions iPECS affected versions not specified Description The issue is related to insecure permission handling of session cookies in the web-based management interface. An authenticated, remote attacker could exploit this by modifying the cookie value...

CVE-2020-7824: Privilege Defined With Unsafe Actions

A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnerability by modification the cookie valu...

Cisco Data Center Network Manager Multiple Vulnerabilities (Aug 2020)

According to its self-reported version, Cisco Data Center Network Manager is affected by multiple vulnerabilities. - A vulnerability in a specific REST API of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an...

Cisco Data Center Network Manager XSS (cisco-sa-dcnm-xss-5TdMJRB3)

According to its self-reported version, Cisco Data Center Network Manager is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to a failure to properly validate user-supplied input. An authenticated, remote attacker can exploit this, by persuading a us...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

The CVE-2020-7831 entry concerns the web-based Ebiz4u contract management interface from INOGARD. A vulnerability exists that could let a victim user download arbitrary files by abusing a directory traversal via the startup menu directory to trigger automatic execution; the impact per the descrip...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

PT-2020-19827

Name of the Vulnerable Software and Affected Versions INOGARD Ebiz4u affected versions not specified Description A vulnerability in the web-based contract management service interface Ebiz4u could allow an attacker to download any file. The attacker can use directory traversal via the startup men...

Cisco Vision Dynamic Signage Director Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability...