Lucene search
K

3351 matches found

CNVD
CNVD
added 2022/01/18 12:0 a.m.16 views

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-04814)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.A cross-site scripting vulnerability exists in Cisco Security Manager, whic...

6.1CVSS3.4AI score0.00173EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/18 12:0 a.m.17 views

Cisco Security Manager Cross-Site Scripting Vulnerability

Cisco Security Manager CSM is a set of enterprise-level management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which stem...

6.1CVSS3.3AI score0.00173EPSS
Exploits0References1
NVD
NVD
added 2022/01/14 8:15 p.m.5 views

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified...

8.1CVSS0.00373EPSS
Exploits0References2
Prion
Prion
added 2022/01/14 8:15 p.m.6 views

Code injection

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified...

5.5CVSS7.8AI score0.00373EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/14 7:11 p.m.10 views

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified...

8.1AI score0.00373EPSS
Exploits0References2
NVD
NVD
added 2022/01/14 5:15 a.m.9 views

CVE-2022-20638

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.00173EPSS
Exploits0References1
NVD
NVD
added 2022/01/14 5:15 a.m.14 views

CVE-2022-20646

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.00153EPSS
Exploits0References1
OSV
OSV
added 2022/01/14 5:15 a.m.0 views

CVE-2022-20644

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS6AI score
Exploits0References1
NVD
NVD
added 2022/01/14 5:15 a.m.9 views

CVE-2022-20639

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.00173EPSS
Exploits0References1
NVD
NVD
added 2022/01/14 5:15 a.m.9 views

CVE-2022-20637

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.00173EPSS
Exploits0References1
NVD
NVD
added 2022/01/14 5:15 a.m.7 views

CVE-2022-20641

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.0016EPSS
Exploits0References1
Prion
Prion
added 2022/01/14 5:15 a.m.8 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00173EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.13 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00173EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.9 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00173EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.8 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00173EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.7 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00153EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.10 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00153EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.10 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.0016EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.11 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00234EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/01/14 5:15 a.m.13 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

4.3CVSS6.2AI score0.00173EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder