CVE-2021-40129

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to submit a SQL query through the CSPC configuration dashboard. This vulnerability is due to insufficient input validation of uploaded files. An attacker...

CVE-2021-40131

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

Cisco Common Services Platform Collector SQL注入漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. configuration of Cisco Common Services Platform Collector prior to version 2.9.1.1 The dashboard is vulnerable to SQL injection, which can be...

PT-2021-6901

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against ...

PT-2021-5677

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector affected versions not specified Description The issue is related to insufficient input validation of uploaded files in the configuration dashboard of Cisco Common Services Platform Collector. This could...

PT-2021-4851 · Cisco · Cisco Common Services Platform Collector

Name of the Vulnerable Software and Affected Versions: Cisco Common Services Platform Collector CSPC affected versions not specified Description: A vulnerability in the web application of Cisco Common Services Platform Collector could allow an authenticated, remote attacker to specify non-log fil...

Cisco Common Services Platform Collector 安全漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. versions of Cisco Common Services Platform Collector prior to 2.9.1.1 of the Web application contains an improper logging restriction...

Cisco Common Services Platform Collector 跨站脚本漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. management interface contains a stored cross-site scripting vulnerability that can be exploited by attackers using the Web management interface ...

CVE-2021-34774

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when...

CVE-2021-34774: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when...

PT-2021-4814

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector affected versions not specified Description The issue is related to the web-based management interface of Cisco Common Services Platform Collector, where errors occur when responding to a correct API...

Cisco Common Services Platform Collector 信息泄露漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network.Cisco Common Services Platform Collector 2.10 and earlier versions of the Web Management interface contains an information disclosure...

CVE-2021-1538

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

CVE-2021-1538 Cisco Common Services Platform Collector Command Injection Vulnerability

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

CVE-2021-1538: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

PT-2021-7442

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC affected versions not specified Description A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute...

Cisco Common Services Platform Collector 操作系统命令注入漏洞

The Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on a network. A command injection vulnerability exists in the configuration dashboard of Cisco Common Services Platform Collector versions prior to 2.9.1. T...

The vulnerability of the information collection tool for devices on the Cisco Common Services Platform Collector lies in the presence of a pre-installed account, which allows a perpetrator to gain access to the device.

The vulnerability of the device information collection tool in the Cisco Common Services Platform Collector relates to the presence of a pre-installed account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

Default credentials

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...