52 matches found
CVE-2018-0129
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...
CVE-2018-0128
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
CVE-2018-0129
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...
CVE-2018-0128: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
CVE-2018-0129: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...
PT-2018-8631
Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: The issue is related to a stored cross-site scripting XSS attack in the web-based management interface. This is due to insufficient validation of user-supplied...
PT-2018-8632
Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack...
Cisco Data Center Analytics Framework Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...
CVE-2015-4189
Cisco Data Center Analytics Framework (DCAF) 1.4 contains a Cross-Site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack the authentication of arbitrary users (Bug ID CSCun26807). Affected product: DCAF 1.4. Root cause: CSRF protection insufficiency enabling unautho...
PT-2015-6448
Name of the Vulnerable Software and Affected Versions Cisco Data Center Analytics Framework DCAF version 1.4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco Data Center Analytics Framework DCAF...
CVE-2015-4189: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...