Cisco DNA Spaces Connector CVE-2019-15997 Local Command Injection Vulnerability

Description Cisco DNA Spaces Connector is prone to a local command-injection vulnerability. A local attacker can exploit this issue to execute arbitrary commands on the underlying OS with root privileges. This issue is being tracked by Cisco Bug ID CSCvp27714. Versions prior to Cisco DNA Spaces...

Cisco Small Business RV Series Routers CVE-2019-15990 Information Disclosure Vulnerability

Description Cisco Small Business RV Series Routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq76840. Technologies Affected Cisco RV016...

Cisco Webex Teams for Windows CVE-2019-16001 DLL Loading Arbitrary Code Execution Vulnerability

Description Cisco Webex Teams for Windows is prone to a local arbitrary code-execution vulnerability. A local attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will result in a denial of service condition. This issue is being tracked by Cisco Bug ID CSCvq87642...

Cisco Unity Express CVE-2019-15986 Local Command Injection Vulnerability

Description Cisco Unity Express is prone to a local command-injection vulnerability. A local attacker can exploit this issue to execute arbitrary commands on the underlying OS with root privileges. This issue is being tracked by Cisco Bug ID CSCvq54120. Versions prior to Cisco Unity Express 10.1...

Cisco Ios Unspecified Vulnerability

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service DoS condition. Th...

Cisco Ios Improper Input Validation

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected...

Cisco Web Security Appliance CVE-2019-15956 Unauthorized Access Vulnerability

Description Cisco Web Security Appliance is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvp51493. Technologies Affected...

Multiple Cisco Products CVE-2019-15288 Remote Privilege Escalation Vulnerability

Description Multiple Cisco Products are prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. The issue is being tracked by Cisco Bug ID CSCvq29901. Technologies Affected Cisco RoomOS Software Cisco TelePresence CE Software 8.0.0 Cis...

Cisco Industrial Network Director CVE-2019-15973 Cross Site Scripting Vulnerability

Description Cisco Industrial Network Director is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This ca...

Cisco Unified Communications Manager Cross-Site Scripting (XSS) Vulnerability

According to its self-reported version, Cisco Unified Communications Manager is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click ...

Cisco UCS Director Loggoff DoS (cisco-sa-20190821-ucs-imc-dos)

According to its self-reported version, the remote host is running a version of Cisco UCS Director that is affected by a denial of service vulnerability. An unauthenticated, remote attacker can exploit this to cause all currently authenticated users to be logged off. C Tenable Network Security,...

Cisco TelePresence Advanced Media Gateway CVE-2019-15966 Denial of Service Vulnerability

Description Cisco TelePresence Advanced Media Gateway is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCvr69362. Technologies Affected Cisco TelePresence Advanced Media...

Cisco Finesse Appliance HTTP Request Processing Server-Side Request Forgery Vulnerability (cisco-sa-20160504-finesse)

According to its self-reported version, the Cisco Finesse appliance is affected by a server-side request forgery SSRF in application programming interface API for gadgets integration due to insufficient access controls. An unauthenticated, remote attacker can exploit this, via crafted HTTP reques...

Cisco Finesse Appliance XML Processing Denial of Service Vulnerability (Cisco-SA-20150527-CVE-2015-0754)

According to its self-reported version, the Cisco Finesse appliance is affected by a denial of service DoS vulnerability exists due to improper processing of XML files. An authenticated, remote attacker can exploit this issue, via sending a malicious XML file, to cause the device to stop...

Cisco Finesse Appliance User Data Information Disclosure Vulnerability (Cisco-SA-20130812-CVE-2013-3455)

According to its self-reported version, the Cisco Finesse appliance is affected by an information disclosure vulnerability in HTTP queries due to insufficient encryption. An unauthenticated, remote attacker can exploit this, via capturing the HTTP query, to disclose potentially sensitive...

Cisco Finesse Appliance Cross-Site Scripting Vulnerability (Cisco-SA-20150501-CVE-2015-0714)

According to its self-reported version, the Cisco Finesse appliance is affected by a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Cisco Finesse Appliance Authentication Bypass Vulnerability (cisco-sa-20160202-fducce)

According to its self-reported version, the Cisco Finesse appliance is affected by an authentication bypass vulnerability exists in Extensible Messaging and Presence Protocol XMPP due to a default account with a static password. An unauthenticated, remote attacker can exploit this, via using the...

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid130013; scriptversion"1.3"; scriptcvsdate"Date: 2019/10/31...

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid130014; scriptversion"1.2"; scriptcvsdate"Date: 2019/10/18...

Cisco TelePresence CE Software CVE-2019-15962 Local Arbitrary File Write Vulnerability

Description Cisco TelePresence Collaboration Endpoint Software is prone to a local arbitrary file-write vulnerability. Successful exploits may allow an attacker to write arbitrary files on the root directory. This issue is being tracked by Cisco Bug ID CSCvq47315. Technologies Affected Cisco...