CVE-2012-4083: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System UCS allow remote authenticated users to cause a denial of service memory corruption and session termination via long string values for unspecified parameters, aka Bug ID CSCtg20751...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...

CVE-2013-3440

Cisco Unified Operations Manager’s administrative web interface contains multiple XSS vulnerabilities (CVE-2013-3440) due to improper input validation and weak cookie protections. An unauthenticated, remote attacker could lure a user to a crafted URL to execute arbitrary script or hijack sessions...

PT-2013-4395

Name of the Vulnerable Software and Affected Versions Cisco Unified Operations Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface. These vulnerabilities allow remote attackers to inject...

CVE-2013-3440: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...

CVE-2013-3380

The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...

CVE-2013-3380

The advisory concerns Cisco Secure Access Control System (ACS) and its administrative web interface. The issue is a failure to properly restrict the report view page, allowing remote authenticated users to view potentially sensitive information via a direct request (Bug ID CSCue79279). Exploitati...

PT-2013-4338

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description The administrative web interface in the Access Control Server does not properly restrict the report view page. This allows remote authenticated users to obtain...

Cisco Access Control Server Privilege Escalation Vulnerability

A vulnerability in the administrative web interface of Cisco Access Control Server could allow an authenticated, remote attacker to access the report view functions of the portal without being given the proper privileges. The vulnerability is due to a failure to properly secure the report view...

Authentication flaw

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as...

CVE-2013-0632

CVE-2013-0632 affects Adobe ColdFusion 9.x and 10, where an authentication bypass in the RDS/admin interface can be triggered by logging in with an empty default password. The root cause is a bypass of authentication that may allow access to the ColdFusion Administrator interface, potentially ena...

CVE-2012-6339

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...

CVE-2012-6339

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow 1 remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow 2 remote...

PT-2012-6271

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server versions prior to 5.0.6.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or...

Design/Logic Flaw

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724...

CVE-2012-3076: Improper Neutralization of Special Elements used in an OS Command

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804...

PT-2012-4467

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Immersive Endpoint Devices versions prior to 1.7.4 Description The issue concerns the administrative web interface, which allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 44...

CVE-2012-3075: Improper Neutralization of Special Elements used in an OS Command

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724...

PT-2012-4468

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions prior to 1.8.0 Description The administrative web interface of the Cisco TelePresence Recording Server has an issue that allows remote authenticated users to execute arbitrary commands...

CVE-2011-4436: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...