Lucene search
K

3351 matches found

Cvelist
Cvelist
added 2024/11/06 4:31 p.m.13 views

CVE-2024-20538 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An...

6.1CVSS0.00398EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 4:31 p.m.9 views

CVE-2024-20538 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An...

6.1CVSS6.8AI score0.00398EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 4:30 p.m.9 views

CVE-2024-20530 Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco ISE could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An...

6.1CVSS6.8AI score0.0052EPSS
Exploits0References1
CVE
CVE
added 2024/11/06 4:29 p.m.41 views

CVE-2024-20511

CVE-2024-20511 describes a cross-site scripting (XSS) vulnerability in the web-based management interfaces of Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). The issue stems from insufficient input validation in the web UI, allowing an...

6.1CVSS6AI score0.00447EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/06 4:29 p.m.10 views

CVE-2024-20511 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

6.1CVSS0.00447EPSS
Exploits0References1
CNVD
CNVD
added 2024/10/30 12:0 a.m.7 views

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43202)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...

6.1CVSS6.6AI score0.00346EPSS
Exploits0References1
CNVD
CNVD
added 2024/10/30 12:0 a.m.6 views

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2024-43203)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...

5.4CVSS6.6AI score0.00104EPSS
Exploits0References1
NVD
NVD
added 2024/10/23 6:15 p.m.9 views

CVE-2024-20372

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to...

6.1CVSS0.0017EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 5:46 p.m.42 views

CVE-2024-20415

Cisco Firepower Management Center (FMC) web interface suffers reflected XSS due to insufficient validation of user-supplied input. Affected component is the web-based management UI; exploitation by an unauthenticated, remote attacker could run arbitrary script code in the interface context or acc...

6.1CVSS5AI score0.00155EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/10/23 5:46 p.m.11 views

CVE-2024-20415

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

4.8CVSS0.00155EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 5:38 p.m.44 views

CVE-2024-20410

Cisco Firepower Management Center (FMC) web-based management interface is affected by a cross-site scripting (XSS) vulnerability due to insufficient input validation. The issue allows an unauthenticated, remote attacker to craft input in interface data fields that could execute arbitrary script c...

6.1CVSS5.3AI score0.00326EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/10/23 5:38 p.m.9 views

CVE-2024-20410

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

5.4CVSS6.1AI score0.00326EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 5:38 p.m.10 views

CVE-2024-20409

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

4.8CVSS6.1AI score0.00161EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 5:38 p.m.42 views

CVE-2024-20409

CVE-2024-20409 affects Cisco Firepower Management Center (FMC) Web UI. The issue is insufficient validation of user-supplied input in the web-based management interface, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by inserting crafted input into int...

6.1CVSS5AI score0.00161EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2024/10/23 5:33 p.m.40 views

CVE-2024-20386

The CVE-2024-20386 entry describes stored XSS in the web-based management interface of Cisco Firepower Management Center (FMC) Software due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could inject crafted input into interface data fields to execute scrip...

6.1CVSS5AI score0.00084EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/10/23 5:33 p.m.10 views

CVE-2024-20386

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to...

4.8CVSS5.9AI score0.00084EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 5:30 p.m.44 views

CVE-2024-20377

CVE-2024-20377 concerns Cisco Firepower Management Center (FMC) web-based management interface. A stored XSS vulnerability arises from improper validation of user-supplied input, enabling an authenticated, remote attacker to lure a user into clicking a crafted link, which could execute arbitrary ...

5.4CVSS5.3AI score0.00185EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/23 5:29 p.m.11 views

CVE-2024-20372

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to...

6.1CVSS0.0017EPSS
Exploits0References1
NVD
NVD
added 2024/10/23 5:15 p.m.12 views

CVE-2024-20300

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

5.4CVSS0.00107EPSS
Exploits0References3
NVD
NVD
added 2024/10/16 5:15 p.m.19 views

CVE-2024-20460

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user. This vulnerability is due to insufficient validation of user input...

6.1CVSS0.00198EPSS
Exploits0References1
Rows per page
Query Builder