CVE-2016-9204

A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...

CVE-2016-9204

CVE-2016-9204 relates to Cisco Intercloud Fabric Director. The vulnerability stems from static credentials for an internal account, enabling an unauthenticated, remote attacker to connect to internal services within the Cisco Nexus 1000V InterCloud deployment. Affected releases include 2.2(1). Th...

CVE-2016-9204: Undefined Security Weakness

A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...

Cross site scripting

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

CVE-2014-3367

The CVE-2014-3367 entry affects Cisco Nexus 1000V InterCloud’s vCloud Director component. The root cause is insufficient input validation that allows an attacker to craft a link directing an authenticated user to a malicious site, enabling a reflected XSS attack. Impact described: remote attacker...

CVE-2014-3367

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

PT-2014-5258

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V InterCloud for VMware affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability in the vCloud Director component, allowing remote attackers to inject arbitrary web script or...

CVE-2014-3367: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

CVE-2014-0685: Undefined Security Weakness

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

PT-2014-3780

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V InterCloud versions 5.21IC11.2 and earlier Description A remote attacker can bypass ACL deny statements via crafted IGMPv2 or IGMPv3 packets. The issue is due to a lack of IGMPv2 and IGMPv3 support in ACLs. An attacker could...