CVE-2018-15424

Cisco Identity Services Engine (ISE) web-based management interface contains multiple vulnerabilities that could allow an authenticated remote attacker to execute arbitrary commands on the device with the web server’s privileges. Affected component is the ISE web management interface; root cause ...

CVE-2018-15434

The CVE-2018-15434 entry refers to Cisco Unified IP Phone 7900 Series with a vulnerability in the web-based management interface. Affected component: the web-based management interface; root cause: insufficient validation of user-supplied input leading to cross-site scripting (XSS). Impact stated...

CVE-2018-15400 Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-15401 Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

CVE-2018-0423

CVE-2018-0423 affects Cisco RV110W, RV130W, and RV215W routers via a buffer overflow in the Guest user feature of the web-based management interface. The issue arises from improper boundary checks on user-supplied input, allowing an unauthenticated, remote attacker to trigger a buffer overflow th...

CVE-2018-0445

Cisco Packaged Contact Center Enterprise (PCCE) web-based management interface is affected by a CSRF vulnerability due to insufficient protections. An unauthenticated, remote attacker could entice a user to follow a crafted link and perform arbitrary actions on the device with the user’s privileg...

CVE-2018-15425 Multiple Vulnerabilities in Cisco Identity Services Engine

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server...

CVE-2018-0458

CVE-2018-0458 affects Cisco Prime Collaboration Assurance (PCA) web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to conduct a cross-site scripting (XSS) attack by tricking a user into clicking a...

PT-2018-8832

Name of the Vulnerable Software and Affected Versions Cisco Packaged Contact Center Enterprise affected versions not specified Description A stored XSS attack could be conducted by an unauthenticated, remote attacker against a user of the web-based management interface. This issue arises from...

PT-2018-13026

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system...

PT-2018-13017

Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A stored cross-site scripting XSS attack could be conducted by an unauthenticated, remote attacker against a user of the web-based management interface. The issue arises from...

PT-2018-13012

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform 2100 affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduc...

PT-2018-8842

Name of the Vulnerable Software and Affected Versions Cisco Enterprise NFV Infrastructure Software NFVIS affected versions not specified Description The issue is related to insufficient server-side authorization checks in the web-based management interface. An authenticated, remote attacker with...

PT-2018-8835

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

PT-2018-8822

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8821

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8830

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary...

PT-2018-8833

Name of the Vulnerable Software and Affected Versions Cisco Packaged Contact Center Enterprise affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions o...

PT-2018-8834

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform...

PT-2018-8836

Name of the Vulnerable Software and Affected Versions Cisco Tetration Analytics affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary...