PT-2019-1719

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

PT-2019-1720

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

PT-2019-1723

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

CVE-2019-1707

CVE-2019-1707 affects Cisco DNA Center’s web-based management interface. A stored XSS vulnerability arises from insufficient validation of user-supplied input, exploitable by persuading an authenticated user to click a crafted link. Successful exploitation could execute arbitrary script code in t...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerabilities are due...

CVE-2019-1707: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of...

CVE-2019-1702: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerabilities are due...

PT-2019-1547

Name of the Vulnerable Software and Affected Versions Cisco Enterprise Chat and Email version 11.61 Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct a cross-site...

CVE-2019-1663: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The...

PT-2019-1515

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 Cisco RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 Cisco RV215W Wireless-N VPN Router versions prior to 1.3.1.1 Description The issue is caused by a buffer...

CVE-2019-1665: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

PT-2019-14738

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex software versions prior to 3.51a Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. Th...

CVE-2019-1673: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some...

CVE-2019-1670 Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

CVE-2019-1670

Cisco Unified Intelligence Center Software contains a web-interface cross-site scripting (XSS) vulnerability (CVE-2019-1670) due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a link, enabling arbitrary requests to be submitted to the affecte...

CVE-2019-1671: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to...

CVE-2019-1661: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...

PT-2019-1375

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center Software affected versions not specified Description The issue is related to insufficient input validation of a user-supplied value in the web-based management interface, which could allow an unauthenticated,...

PT-2019-1379

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site...