PT-2014-5244

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal versions 2008.3 SP9 and earlier Description The issue allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability"...

CVE-2014-3352: Improper Input Validation

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal 2008.3SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID...

PT-2014-5242

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal affected versions not specified Description The issue is related to improper implementation of URL redirection in Cisco Intelligent Automation for Cloud, allowing remote authenticat...

CVE-2014-3350: Undefined Security Weakness

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870...

CVE-2014-3349: Improper Input Validation

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...

CVE-2014-3351: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380...

PT-2014-5243

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal affected versions not specified Description The issue allows remote attackers to obtain sensitive information via crafted packets due to the software not properly considering whethe...

PT-2014-5241

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal affected versions not specified Description The issue concerns the handling of file submissions, where the software does not validate file types. This allows remote authenticated...

CVE-2014-3298

Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976...

PT-2014-5192

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud in Cisco Cloud Portal affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by reading web-server access logs, web-server Referer logs, or...

CVE-2014-3297: Undefined Security Weakness

Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history, aka Bug...

CVE-2014-3298: Undefined Security Weakness

Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976...

PT-2014-5193

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud in Cisco Cloud Portal affected versions not specified Description The issue concerns the Form Data Viewer in Cisco Intelligent Automation for Cloud, which stores passwords in form data. This allows remote...

CVE-2014-0694: Undefined Security Weakness

Intelligent Automation for Cloud IAC in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772...

CVE-2013-3406

The CVE-2013-3406 issue affects Cisco Services Portal’s Cisco Intelligent Automation for Cloud component (9.4(1)). The vulnerability, tracked as Bug CSCug65687, allows remote authenticated users to read arbitrary files via crafted requests due to insufficient server-side input validation in the "...

CVE-2013-3406: Improper Input Validation

The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.41 allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCug65687...

PT-2013-4363

Name of the Vulnerable Software and Affected Versions Cisco Services Portal version 9.41 Description The issue allows remote authenticated users to read arbitrary files via a crafted request. This is related to the "Files Available for Download" implementation in the Cisco Intelligent Automation...