Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...

CVE-2015-0714

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...

Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0709

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service device crash by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348...

Code injection

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service device crash by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348...

CVE-2015-0708

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service device crash by including an IANA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956...

Design/Logic Flaw

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service device crash by including an IANA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956...

CVE-2015-0709

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service device crash by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348...

CVE-2015-0708

CVE-2015-0708 affects Cisco IOS 15.4S, 15.4SN, 15.5S and IOS XE 3.13S/3.14S. The issue arises from improper handling of DHCPv6 SOLICIT messages for IA-NA, allowing an unauthenticated adjacent attacker to crash the device and cause a DoS condition. Publicly available details in the connected docum...

Cisco NX-OS DHCP POAP Command Injection Vulnerability

The remote Cisco device is running a version of NX-OS software that is affected by a command injection vulnerability due to the PowerOn Auto Provisioning POAP feature not properly validating the DHCP options returned by POAP. An attacker on an adjacent network, using crafted DHCP packets, can...

CVE-2015-0707

Cross-site scripting XSS vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425...

CVE-2015-0707

Cisco FireSIGHT System Software versions 5.3.1.1 and 6.0.0 in FireSIGHT Management Center are affected by a cross-site scripting (XSS) vulnerability. The issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter (Bug ID CSCus85425). Impact is web ...

CVE-2015-0707

Cross-site scripting XSS vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

CVE-2015-0704

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

CVE-2015-0705

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

CVE-2015-0703

Cross-site scripting XSS vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857...