8712 matches found
CVE-2020-3463 Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected service. The vulnerability is due to insufficient...
CVE-2020-3464 Cisco UCS Director Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interfa...
Cisco Data Center Network Manager XSS (cisco-sa-dcnm-xss-3jkDLsLV)
According to its self-reported version, Cisco Data Center Network Manager is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to a failure to properly validate user-supplied input. An unauthenticated, remote attacker can exploit this, by intercepting ...
Cisco Webex Meetings Reflected XSS (cisco-sa-webex-mttngs-xss-3VbdxDuF)
According to its self-reported version, Cisco Webex Meetings is prior to 40.6.0. It is, therefore, affected by a Reflected Cross-Site Scripting XSS vulnerability. An unauthenticated, remote attacker can exploit this vulnerability by persuading a user to click a malicious link. A successful exploi...
PT-2020-13419
Name of the Vulnerable Software and Affected Versions RosarioSIS Student Information System versions prior to 6.5.1 Description The issue concerns a Reflected Cross-Site Scripting vulnerability. This allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in ...
CVE-2020-16275
A cross-site scripting XSS vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
Cross site scripting
A cross-site scripting XSS vulnerability in the Credential Manager component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
Cross site scripting
A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
CVE-2020-16278
A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
CVE-2020-16278: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
PT-2020-14865
Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description A cross-site scripting XSS issue in the Permissions component could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafted link...
PT-2020-14862
Name of the Vulnerable Software and Affected Versions SAINT Security Suite versions 8.0 through 9.8.20 Description A cross-site scripting XSS issue in the Credential Manager component could allow arbitrary script to run in the context of a logged-in user when the user clicks on a specially crafte...
Cisco Webex Meetings Cross-Site Scripting Vulnerability
Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web management interface in Cisco Webex Meetings versions prior to T40.6.0, which stems from the program failing to adequately validate user-submitted input. The...
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
PT-2020-4220
Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow a remote attacker to conduct a cross-site...
CVE-2020-3460
A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...
Cross site scripting
A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...
CVE-2020-3460 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...
CVE-2020-3460 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...
Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting (cisco-sa-cucm-cuc-imp-xss-OWuSYAp)
According to its self-reported version, Cisco Unified Communications Manager IM & Presence Service is affected by a Cross-Site Scripting vulnerabilities. An remote attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful...