Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco Adaptive Security Appliance - Path Traversal...

CVE-2018-0296

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will...

CVE-2018-0296

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will...

PT-2018-1851

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software affected versions not specified Description The issue is related to insufficient validation of HTTP requests in the web interface of the Cisco Adaptive...

Unspecified Information Disclosure Vulnerability in SAP ASE Installer

SAP Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. An unspecified information disclosure vulnerability exists in SAP ASE Installer. An attacker cou...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transport Layer Security Library Input Validation Vulnerability

The Cisco Adaptive Security Virtual Appliance and others are security appliances from Cisco in the U.S. The Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software are operating systems that run in different security appliances. Adaptive Security Appliance ASA Software...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

SAP Sybase Adaptive Server Enterprise Backup Server Component Security Bypass Vulnerability

SAP Sybase Adaptive Server Enterprise ASE is a relational database management system from SAP. The system can be used in data-intensive environments , and has a fast , stable performance , etc. Backup Server is one of the backup server . A security vulnerability exists in the Backup Server...

CVE-2018-0251

A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer SSL VPN portal of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of that portal on an...

CVE-2018-0231

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

CVE-2018-0242

A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0229

A vulnerability in the implementation of Security Assertion Markup Language SAML Single Sign-On SSO authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance ASA Software, and Cisco Firepower Threat Defense FTD Software could allow an...

Cross site scripting

A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0228

The CVE-2018-0228 issue is a vulnerability in the ingress flow creation in Cisco ASA/FTD software. The root cause is improper handling of an internal software lock that can starve other processes of CPU cycles, causing a high CPU condition and DoS when an attacker sends a steady stream of malicio...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

Design/Logic Flaw

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

Multiple Cisco Products Adaptive Security Appliance and Firepower Threat Defense Software Denial of Service Vulnerabilities

Cisco 3000 Series Industrial Security Appliances ISR and others are security firewall appliances from Cisco.Adaptive Security Appliance ASA and Firepower Threat Defense FTD Software are firewall software used in different Cisco security appliances. Adaptive Security Appliance ASA and Firepower...

Cisco Adaptive Security Appliance Application Layer Protocol Inspection Denial of Service Vulnerabilities

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of servi...