CVE-2017-3888: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3848: Improper Neutralization of Input During Web Page Generation

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected...

CVE-2017-3832

A vulnerability in the web management interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An...

CVE-2017-3832

CVE-2017-3832 affects Cisco Wireless LAN Controller (WLC) firmware 8.3.102.0. The issue is in the web management interface where a missing internal handler for a specific request can be triggered by accessing a hidden URL on the GUI, allowing an unauthenticated remote attacker to cause a device r...

CVE-2017-3832: Improper Handling of Exceptional Conditions

A vulnerability in the web management interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An...

CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

The CVE-2017-7450 issue affects the AIRTAME HDMI dongle prior to firmware 2.2.0. The vulnerability allows unauthenticated access to a large portion of the device’s management interface, enabling an attacker to extract sensitive information (including the Wi‑Fi password), reboot the device, or for...

PT-2017-16129

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller version 8.3.102.0 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The issue is due to a...

PT-2017-3090

Name of the Vulnerable Software and Affected Versions AIRTAME HDMI dongle versions prior to 2.2.0 Description The issue is related to insufficient access control in the AIRTAME HDMI dongle's firmware, allowing unauthenticated access to a significant part of the management interface. This can lead...

CVE-2017-7450: Improper Authentication

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-3856

A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. A...

Cisco IOS XE Software Web User Interface Denial of Service Vulnerability

A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. An attack...

CVE-2017-3868

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Release...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

Cross site scripting

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Release...

PT-2017-1541

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.52.14076.1 Cisco Unified Communications Manager versions prior to 12.00.98000.219 Description A cross-site scripting XSS filter bypass issue exists in the web-based management interface, allowing...

PT-2017-16150

Name of the Vulnerable Software and Affected Versions Cisco UCS Director version 6.00.0 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. Recommendations F...

PT-2017-16152

Name of the Vulnerable Software and Affected Versions Cisco Prime Optical for Service Providers version 10.60.1 Description A RADIUS Secret Disclosure issue in the web network management interface could allow an authenticated, remote attacker to disclose sensitive information in the configuration...