435 matches found
PT-2014-5264
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM admin interface of the Server in Cisco Unified Communications Manager. These...
PT-2014-5263
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM Dialed Number Analyzer interface. These vulnerabilities allow remote attackers to...
CVE-2014-3372: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...
CVE-2014-3373: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550...
CVE-2014-3375: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597...
CVE-2014-3374: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90582...
PT-2014-5265
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM Service interface. These vulnerabilities allow remote attackers to inject arbitrar...
CVE-2014-4009
CVE-2014-4009 affects SAP CCMS Monitoring (BC-CCM-MON), where hardcoded credentials enable remote attackers to obtain access via unspecified vectors. The connected sources confirm the issue but do not provide product versions, affected components beyond BC-CCM-MON, or explicit remediation steps i...
PT-2014-5671
Name of the Vulnerable Software and Affected Versions SAP CCMS Monitoring BC-CCM-MON affected versions not specified Description The issue concerns hardcoded credentials in SAP CCMS Monitoring, making it easier for remote attackers to gain access. Recommendations At the moment, there is no...
Fedora 19 : libreswan-3.7-1.fc19 (2013-23315)
Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM support Improved Cisco interop, IKEv2 improvements, bugfixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora 20 : libreswan-3.7-1.fc20 (2013-23250)
Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 18 : libreswan-3.7-1.fc18 (2013-23299)
Security fix for CVE-2013-4564, extended AES-GCM and AES-CCM Improved Cisco interop, IKEv2 improvements, bugfixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...
CVE-2011-0960: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to execute arbitrary SQL commands via 1 the CCMs parameter to iptm/PRTestCreation.do or 2 the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716...
Cisco CNS Network Registrar Denial of Service (CVE-2004-1164)
CNS Network Registrar is a product suite developed by Cisco Systems that implements DNS, DHCP, and TFTP services for medium to large IP-based networks. The product suite provides a management architecture that allow for the configuration and management of one or more clusters of CNS Network...
CVE-2008-1747: Improper Input Validation
Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service CCM service restart via an unspecified SIP INVITE message, aka Bug ID CSCsk46944...
CVE-2007-5413
HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...
[security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00795552 Version: 2 HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager CCM, Remote Unauthorized Arbitrary Code Execution or Denial of Service DoS NOTICE: The information in...
CVE-2006-5782
radexecd.exe in HP OpenView Client Configuraton Manager CCM does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial of service reboot by calling radbootw.exe or create arbitrary files by calling radcrecv...
CVE-2006-5782
CVE-2006-5782 affects HP OpenView Client Configuration Manager (CCM) 1.0. The vulnerability exists in the Radia Notify Daemon, radexecd.exe, which binds to TCP port 3465 and allows remote attackers to execute commands in the radexecd.exe install directory without authentication. Exploitation can ...
