Lucene search
+L

511 matches found

Positive Technologies
Positive Technologies
•added 2018/08/28 12:00 a.m.•5 views

PT-2018-2136

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description The issue is related to improper validation of user requests within the management interface, allowing an authenticated, remote attacker to conduct directory travers...

8.5CVSS0.05406EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2018/03/08 7:00 a.m.•21 views

CVE-2018-0210

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

7.3AI score0.01168EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/03/08 7:00 a.m.•38 views

CVE-2018-0210

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

8.8AI score0.01168EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/08 12:00 a.m.•5 views

CVE-2018-0210: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

8.8CVSS7.8AI score0.01168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/03/08 12:00 a.m.•3 views

PT-2018-8672

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perfo...

8.8CVSS0.01168EPSS
SaveExploits0References5
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•21 views

Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (CNVD-2018-05432)

Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. A cross-site scripting vulnerability exists in the web-based management interface in Cisco DCAF, which arises from the program's failure to adequately validate user-submitted input. A remote attacke...

6.1CVSS6.8AI score0.00868EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•27 views

Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (CNVD-2018-05306)

Cisco Data Center Analytics Framework DCAF application is a set of data center analytics frameworks from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the web-based management interface of the Cisco DCAF application, which stems from the program's failure to...

6.1CVSS6.6AI score0.00868EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•19 views

Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability

Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. The Cisco Data Center Analytics Framework suffers from a cross-site scripting vulnerability that arises from the program's failure to adequately validate user-submitted input. A remote attacker coul...

6.1CVSS6.6AI score0.00868EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/22 12:00 a.m.•7 views

CVE-2018-0145: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...

6.1CVSS6.5AI score0.00868EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/22 12:00 a.m.•6 views

CVE-2018-0146: Cross-Site Request Forgery (CSRF)

A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to improper CSRF protection by the affected application. An attacker could...

5.8CVSS6AI score0.00446EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/02/22 12:00 a.m.•32 views

CVE-2018-0145

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...

6AI score0.00868EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/22 12:00 a.m.•4 views

PT-2018-8643

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack...

6.1CVSS0.00868EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2018/02/22 12:00 a.m.•4 views

PT-2018-8644

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A security issue in the Cisco Data Center Analytics Framework application allows an unauthenticated, remote attacker to conduct a cross-site request forgery CS...

5.8CVSS0.00446EPSS
SaveExploits0References4
Cisco
Cisco
•added 2018/02/21 4:00 p.m.•86 views

Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to improper CSRF protection by the affected application. An attacker could...

5.4CVSS1.6AI score0.00446EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/08 7:29 a.m.•23 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

4.3CVSS5.9AI score0.00868EPSS
SaveExploits0References2
NVD
NVD
•added 2018/02/08 7:29 a.m.•29 views

CVE-2018-0128

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

6.1CVSS5.9AI score0.00868EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/08 12:00 a.m.•6 views

CVE-2018-0128: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

6.1CVSS6.5AI score0.00868EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/08 12:00 a.m.•8 views

CVE-2018-0129: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

6.1CVSS6.5AI score0.00868EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/02/08 12:00 a.m.•4 views

PT-2018-8631

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: The issue is related to a stored cross-site scripting XSS attack in the web-based management interface. This is due to insufficient validation of user-supplied...

6.1CVSS0.00868EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/02/08 12:00 a.m.•4 views

PT-2018-8632

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack...

6.1CVSS0.00868EPSS
SaveExploits0References4
Rows per page
Query Builder