Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability

A vulnerability in the Grapevine update process of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with the privileges of the root user. The vulnerabilit...

em-consulte.com XSS vulnerability

Vulnerable URL: http://www.em-consulte.com/recherche/resultats Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59887 VIP website status:| No Check em-consulte.com SSL connection:|...

CVE-2016-3556

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration...

CVE-2016-3556

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration...

CVE-2016-3556

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration...

CVE-2016-3556

CVE-2016-3556 affects Oracle Agile PLM within Oracle Supply Chain Products Suite versions 9.3.4 and 9.3.5. The vulnerability is described as unspecified, enabling remote attackers to impact confidentiality, integrity, and availability via EM Integration vectors. The NVD CVSSv3 base score is 9.8 (...

CVE-2016-3556

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to EM Integration...

CVE-2016-3540

CVE-2016-3540 affects Oracle Enterprise Manager Grid Control (Enterprise Manager Base Platform UI Framework) 12.1.0.5 and 13.1.0.0. The vulnerability is described as an unspecified flaw in the UI Framework subcomponent that could allow a remote attacker to disclose information, impacting confiden...

CVE-2016-3496

CVE-2016-3496 affects Oracle Enterprise Manager Grid Control, specifically the Enterprise Manager for Fusion Middleware component in Grid Control versions 11.1.1.7 and 11.1.1.9. The issue resides in the SOA Topology Viewer subcomponent and is described as an unspecified vulnerability that allows ...

Code injection

The API in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.01 allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521...

CVE-2016-1386

The API in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.01 allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521...

CVE-2016-1386

CVE-2016-1386 affects Cisco APIC-EM (APIC-Enterprise Module) API in version 1.0(1). The API vulnerability allows remote attackers to spoof administrator notifications by sending crafted attribute-value pairs (Bug CSCux15521). Root cause: insufficient protection of API functions. Impact per source...

CVE-2016-1386

The API in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.01 allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521...

Cisco Application Policy Infrastructure Controller Enterprise Module Unauthorized Access Vulnerability

A vulnerability in the application programming interface API of Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, remote attacker to create false system notifications for administrators. The vulnerability is due to insufficient protection...

CVE-2016-1318

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...

CVE-2016-1318

Cisco APIC-EM (Enterprise Module) 1.1 is affected by CVE-2016-1318, a cross-site scripting vulnerability in the web framework that permits remote injection of arbitrary script/HTML via crafted markup data. Root cause described as insufficient input validation in the web framework. Cisco advisory ...

CVE-2016-1318

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...