CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

Cisco Data Center Network Manager FileServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to read arbitrary files, and bypass authentication, on a system with vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fmserver servlet which i...

Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability

Cisco Prime Data Center Network Manager is a network management application that helps you efficiently implement and manage your virtualized data center. A security vulnerability exists in the fmserver servlet of Cisco DCNM that fails to perform valid input validation for path information. An...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

PT-2015-4793 · Cisco · Cisco Prime Data Center Network Manager

Name of the Vulnerable Software and Affected Versions: Cisco Prime Data Center Network Manager DCNM versions prior to 7.11 Description: The issue allows remote attackers to read arbitrary files via a crafted pathname. This is due to a directory traversal vulnerability in the fmserver servlet...

Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability

Cisco Prime Data Center Network Manager DCNM contains a file information disclosure vulnerability that could allow an unauthenticated, remote attacker to retrieve arbitrary files from the underlying operating system. Cisco has released software updates that address this vulnerability. Workarounds...

VulnCheck KEV: CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM allows remote attackers to read arbitrary files...

Symantec Data Center Security Server 'WCUnsupportedClass.jsp' XSS

The remote Symantec Data Center Security Server running on the remote host is affected by a reflected cross-site scripting vulnerability due to improper validation of input to the 'classname' parameter in the 'WCUnsupportedClass.jsp' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Symantec Data Center Security Server 'SSO-Error.jsp' XSS (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by a reflected cross-site scripting vulnerability due to improper validation of input to the 'ErrorMsg' parameter in the '/webui/Khakidocs/SSO-Error.jsp' script. %NASLMINLEVEL 70300 C Tenable Network Security,...

Symantec Data Center Security Server 'environment.jsp' Information Disclosure (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by an information disclosure vulnerability in the '/webui/admin/environment.jsp' script, which discloses sensitive information about the server and software configuration. %NASLMINLEVEL 70300 C Tenable Network...

Symantec Data Center Security Server SQLi (SYM15-001)

The remote Symantec Data Center Security Server running on the remote host is affected by a SQL injection vulnerability in the '/sis-ui/authenticate' script on the web console interface. A remote attacker, using a crafted HTTP request, can exploit this to execute SQL queries, allowing the...

Symantec Data Center Security Web Administration Interface Detection

Binary data symantecdcswebinterfacedetect.nbin...

Symantec Data Center Security Web Console Interface Detection

Binary data symantecdcsconsoleinterfacedetect.nbin...

Privilege Elevation Issue Affecting Some Intel® Solid-State Drive Data Center Family for PCIe Products

Summary: A customer feature was added to the Intel® Solid-State Drive Data Center Family for PCIe, improving device management in the field. The initial implementation allowed for a potential privilege elevation. Description: A customer feature was added to the Intel® Solid-State Drive Data Cente...

Symantec Data Center Security - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities products: Symantec Data Center Security: Server Advanced SDCS:SA Symantec Critical System Protection SCSP vulnerable version: see:...

Symantec Data Center Security - Multiple Vulnerabilities

Symantec Data Center Security - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities products: Symantec Data Center Security: Server Advanced SDCS:SA Symantec...

Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP security vulnerabilities

SQL injections, crossite scripting, information disclosure, protection bypass...

SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP

SEC Consult Vulnerability Lab Security Advisory 20150122-0 ======================================================================= title: Multiple critical vulnerabilities products: Symantec Data Center Security: Server Advanced SDCS:SA Symantec Critical System Protection SCSP vulnerable version:...

Symantec Data Center Security - Multiple Vulnerabilities

Symantec Data Center Security: Server Advanced SDCS:SA and Symantec Critical System Protection SCSP suffer from cross site scripting, remote SQL injection, information disclosure, and policy bypass vulnerabilities. ======================================================================= title:...