Lucene search
+L

101 matches found

OSV
OSV
added 2024/03/06 5:15 p.m.7 views

CVE-2024-20345

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

6.5CVSS5.8AI score0.02155EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.24 views

Directory traversal

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

4CVSS7AI score0.02155EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.29 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of...

4.9CVSS6.2AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 4:33 p.m.16 views

CVE-2024-20345

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

6.5CVSS6.8AI score0.02155EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 4:33 p.m.102 views

CVE-2024-20345

Cisco AppDynamics Controller is affected by a file-upload vulnerability that enables authenticated, remote directory traversal due to insufficient input validation. Affected component: the file upload function within Cisco AppDynamics Controller. Root cause: improper validation of user-supplied i...

6.5CVSS6.4AI score0.02155EPSS
SaveIn wildExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/06 4:33 p.m.31 views

CVE-2024-20345

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

6.5CVSS6.6AI score0.02155EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 4:33 p.m.85 views

CVE-2024-20346

The CVE-2024-20346 issue affects Cisco AppDynamics Controller’s web-based management interface. It is a reflected cross-site scripting (XSS) vulnerability caused by insufficient validation of user-supplied input. An authenticated, remote attacker could entice a user to click a malicious link, ena...

5.4CVSS5.3AI score0.00358EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/06 4:33 p.m.31 views

CVE-2024-20346

A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of...

5.4CVSS5.5AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 4:33 p.m.11 views

CVE-2024-20346

A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of...

5.4CVSS6AI score0.00358EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/06 4:0 p.m.65 views

Cisco AppDynamics Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of...

5.4CVSS5.3AI score0.00358EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/06 4:0 p.m.44 views

Cisco AppDynamics Controller Path Traversal Vulnerability

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

6.5CVSS6.7AI score0.02155EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/06 12:0 a.m.5 views

PT-2024-2066 · Cisco · Cisco Appdynamics Controller

Name of the Vulnerable Software and Affected Versions: Cisco AppDynamics Controller affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attacker to perform a...

5.5CVSS5.3AI score0.00358EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.6 views

Cisco AppDynamics Controller Security Vulnerability

Cisco AppDynamics Controller is a Cisco company that monitors and analyzes full-stack data through accurate tracking and analysis across a highly distributed application environment. A security vulnerability exists in Cisco AppDynamics Controller, which stems from a vulnerability in the web-based...

5.4CVSS5.8AI score0.00358EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/06 12:0 a.m.7 views

PT-2024-2178 · Cisco · Cisco Appdynamics Controller

Name of the Vulnerable Software and Affected Versions: Cisco AppDynamics Controller affected versions not specified Description: A vulnerability in the file upload functionality could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This issue ...

6.8CVSS6.8AI score0.02155EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.11 views

Cisco AppDynamics Controller Security Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. A security vulnerability exists in Cisco AppDynamics Controller that stems from a flaw in the file upload functionalit...

6.5CVSS6.8AI score0.02155EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/27 12:0 a.m.8 views

The vulnerability of the PHP agent installation script for Cisco AppDynamics allows attackers to enhance their privileges.

The vulnerability of the PHP agent installation for Cisco AppDynamics PHP Agent is related to the incorrect assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.3CVSS7.2AI score0.00187EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2023/11/24 12:0 a.m.22 views

Cisco AppDynamics PHP Agent Elevation of Privilege Vulnerability

Cisco AppDynamics PHP Agent is an agent program from Cisco USA for monitoring the performance of PHP applications. An elevation of privilege vulnerability exists in the Cisco AppDynamics PHP Agent that stems from insufficient privileges being set on the PHP Agent installation directory. An attack...

7.8CVSS6.9AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/21 7:15 p.m.10 views

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

7.8CVSS5.8AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/21 7:15 p.m.27 views

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

7.8CVSS0.00187EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/21 7:15 p.m.19 views

Design/Logic Flaw

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

4.3CVSS6.9AI score0.00187EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder