PT-2021-3082

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3069

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3076

Name of the Vulnerable Software and Affected Versions Cisco Finesse affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This issue is due to improper input...

PT-2021-3073

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3072

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3063

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3070

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3077

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3074

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3071

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

Cisco Unified Communications Manager XSS (cisco-sa-cucm-xss-Q4PZcNzJ)

The version of cisco unified communications manager installed on the remote host is prior to version 14. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Multiple vulnerabilities in the web-based management interface of Cisco Unified CM, could allow an unauthenticated,...

CVE-2021-1499

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerabilit...

CVE-2021-1400

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more informatio...

CVE-2021-1397 Cisco Integrated Management Controller Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

CVE-2021-1401 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more informatio...

CVE-2021-1365: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

CVE-2021-1363: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

CVE-2021-1400: Improper Privilege Management

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more informatio...

CVE-2021-1499: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerabilit...

CVE-2021-1490: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to improper...