CVE-2017-3821

CVE-2017-3821 affects Cisco Unified Communications Manager (CUCM) serviceability page, where improper sanitization/encoding of user input enables unauthenticated, remote attackers to trigger reflected XSS. Affected release: 10.5(2.14076.1). Fixed in CUCM 12.0(0.98000.209), 12.0(0.98000.478), and ...

CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3821

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvc49348. Known Affected Releases: 10.52.14076.1. Known Fixed Releases: 12.00.98000.209...

CVE-2017-3828

Cisco Unified Communications Manager (CUCM) Switches Web UI is vulnerable to cross-site scripting (XSS) via unauthenticated remote access. The issue arises from insufficient validation of user-supplied input in the web-based management interface, enabling an attacker to execute script in a user's...

CVE-2017-3833

The CVE-2017-3833 entry concerns Cisco Unified Communications Manager (CUCM) Web Interface XSS. A vulnerability exists in the web framework where insufficient input validation allows an unauthenticated, remote attacker to execute arbitrary script in the context of the user’s web interface. Affect...

Puppet Enterprise Communication Protocol Denial of Service Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture , it can be used to manage configuration files , users , cron tasks , packages , system services and so on. The Puppet Communications Protocol in Puppet Enterprise fails to properly validate the credentials ...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02006)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02007)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Cisco Unified Communications Manager Information Leakage Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information leakage vulnerability exists i...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (NVD-C-2017-09305)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02004)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting attack vulnerability...

Cisco Unified Communications Manager Information Disclosure Vulnerability (cisco-sa-20170215-cucm3)

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability (cisco-sa-20170215-ucm)

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. Copyright C 2017 Greenbone Networks GmbH Some text descriptions...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm2)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm)

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, a...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. The vulnerability is due to improper sanitization or encoding of user-supplied data by the serviceability page ...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of sensitive files. An attacker could exploit this vulnerability by modifying parameters of a...