CVE-2018-0454 Cisco Cloud Services Platform 2100 Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to perform command injection. The vulnerability is due to insufficient input validation of command input. An attacker could exploit this vulnerability by sendi...

CVE-2018-0459 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to cause an affected system to reboot or shut down. The vulnerability is due to insufficient server-side authorization checks. An attacker who ...

CVE-2018-15406 Cisco UCS Director Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

CVE-2018-15434 Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0425

This CVE (CVE-2018-0425) affects Cisco RV110W/RV130W/RV215W routers, where the web-based management interface improperly enforces access control, allowing an unauthenticated, remote attacker to disclose sensitive configuration data including user credentials. The issue arises from insufficient fi...

CVE-2018-0452

CVE-2018-0452 affects Cisco Tetration Analytics web-based management interface. The vulnerability is an unauthenticated XSS due to insufficient validation of user-supplied input in the web UI. An attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the i...

CVE-2018-0451

CVE-2018-0451 affects Cisco Tetration Analytics web-based management interface. An authenticated, remote attacker can perform arbitrary actions on an affected device via CSRF due to insufficient CSRF protections. Exploitation requires a user to click a crafted link; impact is actions performed wi...

CVE-2018-0454

Cisco Cloud Services Platform 2100’s web-based management interface is affected by a command-injection vulnerability caused by insufficient input validation. An authenticated, remote attacker could exploit this to run customized commands. CVSSv3 base score is 8.8 (HIGH) with network access, low a...

CVE-2018-0450

CVE-2018-0450 concerns Cisco Data Center Network Manager (DCNM). The vulnerability is in the web-based management interface, caused by insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by tricking a user int...

CVE-2018-15400

The CVE-2018-15400 vulnerability affects Cisco Cloud Services Platform 2100, where the web-based management interface does not adequately validate user-supplied input, allowing an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by convincing a user to click a malic...

CVE-2018-15401

The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...

CVE-2018-15406

Cisco UCS Director Web Management Interface is affected by CVE-2018-15406, a stored XSS due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a malicious link, enabling execution of arbitrary script code in the interface context or exposure of b...

CVE-2018-15424

Cisco Identity Services Engine (ISE) web-based management interface contains multiple vulnerabilities that could allow an authenticated remote attacker to execute arbitrary commands on the device with the web server’s privileges. Affected component is the ISE web management interface; root cause ...

CVE-2018-15434

The CVE-2018-15434 entry refers to Cisco Unified IP Phone 7900 Series with a vulnerability in the web-based management interface. Affected component: the web-based management interface; root cause: insufficient validation of user-supplied input leading to cross-site scripting (XSS). Impact stated...

CVE-2018-0446

Cisco Industrial Network Director's web-based management interface is affected by a Cross-Site Request Forgery (CSRF) vulnerability due to insufficient protections. An unauthenticated remote attacker could coax a logged-in user to visit a malicious link, enabling arbitrary actions on the device w...

CVE-2018-0458

CVE-2018-0458 affects Cisco Prime Collaboration Assurance (PCA) web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to conduct a cross-site scripting (XSS) attack by tricking a user into clicking a...

CVE-2018-15426 Cisco Unity Connection Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation of...

CVE-2018-0452 Cisco Tetration Analytics Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-15400 Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0423

CVE-2018-0423 affects Cisco RV110W, RV130W, and RV215W routers via a buffer overflow in the Guest user feature of the web-based management interface. The issue arises from improper boundary checks on user-supplied input, allowing an unauthenticated, remote attacker to trigger a buffer overflow th...