CVE-2021-34773 Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...

CVE-2021-40120: Improper Input Validation

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This...

CVE-2021-40115: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker...

PT-2021-4958

Name of the Vulnerable Software and Affected Versions Cisco Small Business Series Switches affected versions not specified Cisco 250/350/350X/550X/ESW2 Series affected versions not specified Cisco Business 250/350 Series affected versions not specified Description A vulnerability in the web-based...

CVE-2021-40127: Improper Input Validation

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based...

CVE-2021-34731: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently...

CVE-2021-34773: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...

CVE-2021-34784: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2021-34774: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when...

PT-2021-4812

Name of the Vulnerable Software and Affected Versions Cisco Small Business 200 Series Smart Switches versions affected versions not specified Cisco Small Business 300 Series Managed Switches versions affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches versio...

PT-2021-5133

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions n...

PT-2021-5039

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct a cross-si...

PT-2021-5134

Name of the Vulnerable Software and Affected Versions Cisco Prime Access Registrar affected versions not specified Description A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripti...

PT-2021-4814

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector affected versions not specified Description The issue is related to the web-based management interface of Cisco Common Services Platform Collector, where errors occur when responding to a correct API...

PT-2021-4961

Name of the Vulnerable Software and Affected Versions Cisco Catalyst PON Series Switches Optical Network Terminal ONT affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the Cisco Catalyst PON Series Switches Optica...

PT-2021-5196

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description The issue is related to the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved...

PT-2021-7007

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Description The issue is related to insufficient checking of...

PT-2021-6882

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to improper enforcement of administrative privilege levels for high-value sensitive data in the web-based management interface of Cisco Identity...

PT-2021-6884

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics affected versions not specified Description A vulnerability in the web-based management interface of the Network Diagrams application could allow an authenticated, remote attacker to conduct a cross-site scriptin...

PT-2021-7234

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive...