PT-2015-1326

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience VXC Client 6215 version 11.227.4 Description The diagnostics subsystem in the administrative web interface allows local users to gain privileges for OS command execution via a crafted option value. This issue...

Design/Logic Flaw

The administrative web interface in Cisco Identity Services Engine ISE before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087...

PT-2015-3180

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 1.3 Description The issue is related to the administrative web interface and is caused by inadequate access control. It allows remote authenticated users to bypass intended access restrictions,...

CVE-2015-4182: Undefined Security Weakness

The administrative web interface in Cisco Identity Services Engine ISE before 1.3 allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or change settings, via unspecified vectors, aka Bug ID CSCui72087...

CVE-2015-0766

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

PT-2015-4871

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 6.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface of the Management Center component. These vulnerabilities allow remote attackers...

PT-2015-4861

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS versions 10.61 and earlier Description The administrative web interface in Cisco Hosted Collaboration Solution HCS allows remote authenticated users to execute arbitrary commands via crafted input to...

CVE-2015-0750: Undefined Security Weakness

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

CVE-2015-0715

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

CVE-2015-0715: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

PT-2015-4835

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified Communications Manager version 11.00.98000.225, update to...

PT-2015-4824

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace version 8.61.9 Description A cross-site scripting XSS issue exists in the administrative web interface, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

CVE-2015-0703: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857...

Cisco Unified MeetingPlace Administrative Web Interface Reflected Cross-Site Scripting Vulnerability

A vulnerability in the administrative web interface of Cisco Unified MeetingPlace could allow an unauthenticated, remote attacker to perform a reflected cross-site scripting XSS attack on an affected system. The vulnerability is due to improper validation of user-supplied input by the affected...

PT-2015-3698

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server ACS affected versions not specified Description The issue allows remote authenticated users with administrative privileges to modify application and configuration files, which can lead to the execution of...

PT-2015-4733

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server versions 1.0 through 1.5 Description The administrative web interface in Cisco WebEx Meetings Server allows remote authenticated users to execute arbitrary OS commands with root privileges. Recommendations For Cisco...

CVE-2015-0589: Improper Input Validation

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID...

CVE-2014-2178

CVE-2014-2178 is a CSRF vulnerability in Cisco RV Series routers’ administrative web interfaces. Affected: RV220W (any firmware), RV120W (<1.0.5.9), RV180 and RV180W (

PT-2014-4535

Name of the Vulnerable Software and Affected Versions Cisco RV router firmware versions prior to 1.0.5.9 on RV220W devices Cisco RV router firmware versions prior to 1.0.4.14 on RV180 and RV180W devices Cisco RV router firmware versions prior to 1.0.5.9 on RV120W devices Description A cross-site...