Cisco Smart Software Manager Satellite SQL Injection Vulnerability

Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. A SQL injection vulnerability exists in the Web management interface of Cisco Smart Software Manager Satellite 5.1.0 and earlier versions. The vulnerability stems from the web management interface no...

Cisco Data Center Network Manager Authorization Bypass Vulnerability (CNVD-2021-09949)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An authorization bypass vulnerability exists in the Web management interface of...

Cisco DNA Center Cross-Site Request Forgery Vulnerability

Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site request forgery vulnerability exists in the web management interface of Cisco DNA Center versions prior to 2.1.2.0. An attacker could exploit this vulnerability by tricking a user into visiting a specially...

Cisco SD-WAN vManage Authorization Bypass Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker by sending a specially crafted HTTP request to...

Bosch PRAESIDEO and Bosch PRAESENSA Cross-Site Scripting Vulnerabilities

Bosch Praesideo and Bosch Praesensa are both products of Bosch, Germany.Bosch Praesideo is a device for digital broadcasting in public places. The device can provide daily information dissemination, emergency broadcasting, fire alarm and other functions for buildings and public places.Bosch...

Cisco Smart Software Manager Satellite Open Redirect Vulnerability

Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. An open redirection vulnerability exists in the web management interface of Cisco Smart Software Manager Satellite 5.0 and earlier versions. The vulnerability stems from improper validation of the...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2021-09945)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site scripting vulnerability exists in the Web management interface of Cis...

Cisco SD-WAN vManage Authorization Bypass Vulnerability (CNVD-2021-05392)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage. The vulnerability stems from insufficient authorization checking of user account...

Critical Cisco SD-WAN Bugs Allow RCE Attacks

Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks SD-WAN solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be...

CVE-2021-1218

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an...

CVE-2021-1222

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1225

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

CVE-2021-1218

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an...

Sql injection

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

CVE-2021-1271

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...

CVE-2021-1271

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...

CVE-2021-1257

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

CVE-2021-1222 Cisco Smart Software Manager Satellite SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1222 Cisco Smart Software Manager Satellite SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

CVE-2021-1225

CVE-2021-1225 corresponds to SQL injection vulnerabilities in Cisco SD-WAN vManage’s web-based management interface, caused by improper validation of SQL queries. This could allow an unauthenticated, remote attacker to modify or retrieve values from the underlying database or operating system. Ci...