CVE-2019-1874

CVE-2019-1874 affects Cisco Prime Service Catalog and is a CSRF vulnerability in the web-based management interface caused by insufficient CSRF protection. An unauthenticated, remote attacker could lure a user to a malicious link and perform arbitrary actions with the privileges of the affected u...

CVE-2019-1874 Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protection mechanisms on the...

CVE-2019-1875 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

CVE-2019-1875 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

CVE-2019-1875

Cisco Prime Service Catalog’s web-based management interface is vulnerable to cross-site scripting (XSS) due to insufficient validation of user-supplied input. An authenticated, remote attacker can craft strings added to multiple configuration fields to execute arbitrary script code within the in...

CVE-2019-1632 Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1632 Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1624

CVE-2019-1624 affects Cisco SD-WAN vManage Web UI. Root cause: insufficient input validation allowing command injection by an authenticated, remote attacker submitting crafted input. Impact: commands executed with root privileges on the device. Affected: vManage Web UI within Cisco SD-WAN Solutio...

CVE-2019-1626

CVE-2019-1626 is a privilege-escalation flaw in Cisco SD-WAN vManage Web UI. An authenticated, remote attacker could exploit a failure to properly authorize certain user actions in the device configuration by sending crafted HTTP requests via the vManage Web UI, gaining elevated privileges and al...

CVE-2019-1843: Improper Input Validation

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denia...

CVE-2019-1632: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1631: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could...

CVE-2019-1874: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protection mechanisms on the...

Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

Cisco Integrated Management Controller Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

PT-2019-2738

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2019-2443

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog affected versions not specified Description The issue is related to a lack of protection against cross-site request forgery CSRF attacks in the web-based management interface. An attacker could exploit this by...

PT-2019-2442

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router affected versions not specified Cisco RV215W Wireless-N VPN Router affected versions not specified Description A vulnerabilit...

PT-2019-2440

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description A vulnerability in the vManage web-based UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage...