368 matches found
Cross site scripting
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...
Cisco Data Center Network Manager Path Traversal Vulnerability
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management...
CVE-2018-0210
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...
CVE-2018-0210
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...
Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (CNVD-2018-05432)
Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. A cross-site scripting vulnerability exists in the web-based management interface in Cisco DCAF, which arises from the program's failure to adequately validate user-submitted input. A remote attacke...
Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (CNVD-2018-05306)
Cisco Data Center Analytics Framework DCAF application is a set of data center analytics frameworks from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the web-based management interface of the Cisco DCAF application, which stems from the program's failure to...
Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability
Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. The Cisco Data Center Analytics Framework suffers from a cross-site scripting vulnerability that arises from the program's failure to adequately validate user-submitted input. A remote attacker coul...
CVE-2018-0145
A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...
Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability
A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to improper CSRF protection by the affected application. An attacker could...
Cross site scripting
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
CVE-2018-0128
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
Cisco Data Center Network Manager Software Cross-Site Scripting Vulnerability
Cisco Data Center Network Manager DCNM Software is a data center management system from Cisco USA. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the web-based manageme...
Cisco Data Center Network Manager Software Content Spoofing Vulnerability
Cisco Data Center Network Manager DCNM Software is a data center management system from Cisco USA. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A content spoofing vulnerability exists in the web interface in Cisco...
CVE-2017-12344
Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...
CVE-2017-12344
Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...
CVE-2011-4650
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...
CVE-2011-4650
Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...
CVE-2016-6403
The Data in Motion DMo application in Cisco IOS 15.61T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912...
Cisco NX-OS Python Scripting Engine Root Access Vulnerability
Cisco NX-OS software is a data center-class operating system that embodies modular design, sustainability, and maintainability. Cisco NX-OS has a security vulnerability that allows a user with locally executable Python scripts to elevate privileges on the Python subsystem and gain root privileges...
Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability
Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. A cross-site request forgery vulnerability exists in Cisco DCAF version 1.4. A remote attacker could exploit this vulnerability to perform unauthorized operations...