Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-01513)

Cisco IOS is a popular Internet operating system.Cisco Unified Communications Manager is a call-processing component of the Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager that stems from a failure to adequately validate user input...

Puppet Enterprise Denial of Service Vulnerability

Puppet is a set of configuration management tools based on a client/server architecture that can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise edition. A security vulnerability exists in the Puppet Communications...

CVE-2016-9686

The Puppet Communications Protocol PCP Broker incorrectly validates message header sizes. An attacker could use this to crash the PCP Broker, preventing commands from being sent to agents. This is resolved in Puppet Enterprise 2016.4.3 and 2016.5.2...

CVE-2016-9686

Removed by vendor...

St. Jude Patches Additional Cardiac Device

St. Jude Medical has patched a vulnerability in another Merlin@home Transmitter medical device vulnerable to a man-in-the-middle attack. The medical device maker issued an update on Monday for its Merlin@home Transmitter “inductive” models, expanding the number of devices impacted by a...

ICSA-17-038-01_Sielco Sistemi Winlog SCADA Software

CVSS v3 7.2 Vendor: Sielco Sistemi Equipment: Winlog SCADA Software Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following Sielco Sistemi products are affected: Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

Cross site scripting

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3798

Cisco Unified Communications Manager is affected by CVE-2017-3798: a cross-site scripting (XSS) filter bypass in the web-based management interface that could allow an unauthenticated, remote attacker to run XSS in a user’s browser. Root cause: failure to properly invoke the XSS filter subsystems...

CVE-2017-3802

The CVE-2017-3802 entry describes a cross-site scripting (XSS) vulnerability in Cisco Unified Communications Manager (CUCM) web interface. An unauthenticated, remote attacker could exploit this to execute arbitrary script code in a user’s browser. Affected release: 12.0(0.99000.9). Fixed releases...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3802: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3798: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

PT-2017-16103

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 11.01.10000.10 through 11.51.10000.6 Description A cross-site scripting XSS filter bypass issue in the web-based management interface could allow an unauthenticated, remote attacker to mount XSS...

PT-2017-16107

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 12.00.99000.9 Description A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the w...