Authentication flaw

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340...

Design/Logic Flaw

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization CoA messages, aka Bug ID CSCuj45332...

Code injection

Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...

CVE-2014-0652

Cisco Context Directory Agent (CDA) is affected by CVE-2014-0652 in the Mappings page. The vulnerability arises from insufficient validation of user-supplied input in the Mappings page, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary script/HTML (XSS) when a use...

CVE-2014-0653

The Cisco ASA Identity Firewall (IDFW) NetBIOS logout probe vulnerability (CVE-2014-0653) stems from insufficient validation of NetBIOS probe responses, allowing an unauthenticated remote attacker to modify a user’s authentication state. Cisco notes the issue in Cisco-SA-20140108-CVE-2014-0653 an...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

CVE-2014-0657

CVE-2014-0657 affects Cisco Unified Communications Manager (Unified CM) administration portal (9.1(1) and earlier). The issue is insufficient role restriction processing, allowing a remote, authenticated attacker to bypass role-based access by revisiting a previously denied portal URL, potentiall...

CVE-2014-0652

Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...

CVE-2014-0656

Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...

CVE-2014-0653

The Identity Firewall IDFW functionality in Cisco Adaptive Security Appliance ASA Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340...

CVE-2013-6983

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh35615...

Sql injection

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh35615...

CVE-2013-6981

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

Command injection

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

CVE-2013-6981

CVE-2013-6981 affects Cisco IOS XE (3.7S(.1) and earlier) where the MPLS IP fragmentation function can be exploited by unauthenticated, remote attackers sending specially crafted MPLS IP packets to crash the Cisco Packet Processor. Connected sources (Cisco Security Advisory CISCO-SA-20131224-CVE-...

CVE-2013-6981

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

Authentication flaw

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227...

CVE-2013-6979

CVE-2013-6979 affects Cisco IOS XE 03.02.xxSE and 03.03.xxSE. The VTY authentication check relies on the Linux-IOS internal-network config, allowing an unauthenticated, remote attacker to bypass authentication if their source address is in 192.168.x.2 and they have IP connectivity to the device. ...