Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...

CVE-2015-0714

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...

CVE-2015-0714

Multiple cross-site scripting XSS vulnerabilities in Cisco Finesse Server 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595...

CVE-2015-0714

CVE-2015-0714 affects Cisco Finesse Server versions 10.0(1), 10.5(1), 10.6(1), and 11.0(1). The vulnerability is a cross-site scripting (XSS) flaw caused by improper validation of user-supplied input, allowing remote attackers to inject arbitrary script or HTML via unspecified parameters. Impacte...

Cisco Finesse Server Cross-Site Scripting Vulnerability

A vulnerability in Cisco Finesse Server could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks. The vulnerability is due to improper input validation of certain parameters passed via HTTP GET or POST methods to an affected device. An unauthenticated, remote...

Cisco Finesse Directory Read Vulnerability

A vulnerability in the web interface of Cisco Finesse could allow an unauthenticated, remote attacker to read the contents of a directory on the server. The vulnerability is due to insufficient access controls on directory access. An attacker could exploit this vulnerability by visiting a URL tha...

Cisco Finesse User Data in Query Vulnerability

A vulnerability in HTTP queries of Cisco Finesse could allow an unauthenticated, remote attacker to collect potentially sensitive user data. The vulnerability is due to insecure transmission of user data in an HTTP query. An attacker could exploit this vulnerability by capturing the HTTP query...

CVE-2013-3455

Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732...

CVE-2013-3457

Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772...

Code injection

Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732...

Path traversal

Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772...

CVE-2013-3457

CVE-2013-3457 involves Cisco Finesse web interface directory access. An unauthenticated, remote attacker can read directory contents via a direct request to an open directory due to insufficient access controls. The issue is tied to Cisco’s advisory Cisco-SA-20130812-CVE-2013-3457, which notes th...

CVE-2013-3457

Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772...

CVE-2013-3455

Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732...

CVE-2013-3455

Cisco Finesse exposes potentially sensitive user data due to an information-disclosure vulnerability in HTTP queries. The issue occurs because user data is transmitted insecurely, allowing unauthenticated, remote actors who can capture HTTP queries on the network to disclose information. Cisco’s ...

Design/Logic Flaw

The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties,...

CVE-2008-1246

The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties,...

CVE-2008-1246

The CVE-2008-1246 entry concerns Cisco PIX/ASA Finesse Operating System versions 7.1 and 7.2. Affected component: enable prompt handling logic that allows local users to escalate privileges by typing characters at the enable prompt, deleting them with Backspace, and then holding Backspace for one...