CVE-2013-6711

CVE-2013-6711 is a reflected cross-site scripting (XSS) vulnerability affecting the Cisco WebEx Sales Center product-creation admin page. The issue arises from insufficient input validation on the page used to create new products, allowing remote attackers to craft a URL that injects arbitrary we...

CVE-2013-6964

Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197...

CVE-2013-6709

The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111...

CVE-2013-6972

Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126...

CVE-2013-6965

The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183...

CVE-2013-6970

Cisco WebEx Meeting Center is affected by CVE-2013-6970, where remote attackers can obtain sensitive information by reading verbose error messages in server responses (Bug ID CSCul35928). The entry notes a medium severity (CVSS v2 base score 5.0) with network access and no authentication required...

CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

CVE-2013-6969

The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990...

CVE-2013-6968

Cisco WebEx Training Center is affected by CVE-2013-6968, a vulnerability in the training registration page where error messages differ depending on whether an email exists, enabling remote attackers to enumerate registered attendees via multiple registration requests (Bug CSCul36003). Affected p...

CVE-2013-6973

Cisco WebEx Training Center is affected by CVE-2013-6973 due to improper handling of inputs, allowing remote attackers to discover other users’ registration IDs via a crafted URL. The vulnerability enables unauthenticated information disclosure and is detailed in Cisco’s advisory Cisco-SA-2013121...

CVE-2013-6973

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20131023-iosxr)

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the 'Affected Products' section of this advisory. The vulnerability is due to improper...

Memory corruption

Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier allows remote attackers to cause a denial of service multi-protocol management outage by making multiple management session requests, aka Bug ID CSCug33233...

CVE-2013-6707

Cisco ASA Software 9.1(.3) and earlier is affected by CVE-2013-6707 due to a memory leak in the connection-manager, causing a denial of service by sending multiple management session requests. The vulnerability allows an unauthenticated, remote attacker to render the device unresponsive to manage...

Code injection

The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of service card reset via crafted packets, aka Bug ID CSCtz50902...

CVE-2013-6705

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...

CVE-2013-6703

The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service card reset via crafted 1 TLS or 2 SSLv3 packets, aka Bug ID CSCuh34787...

Memory corruption

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...

Code injection

The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service card reset via crafted 1 TLS or 2 SSLv3 packets, aka Bug ID CSCuh34787...

CVE-2013-6703

The Cisco ONS 15454 Controller Cards TLS/SSLv3 module is affected by CVE-2013-6703 due to improper validation of TLS/SSLv3 packets. An unauthenticated remote attacker could cause a denial of service by sending crafted packets, potentially triggering a card reset (Bug ID CSCuh34787). Exploitation ...