CVE-2020-3522: Improper Access Control

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to bypass authorization on an affected device and access sensitive information that is related to the device. The vulnerability exists because the...

CVE-2020-3518: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of the affected software. The vulnerability exists because the...

CVE-2020-3484: Incorrect Default Permissions

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacke...

CVE-2020-3490: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability...

PT-2020-3774 · Cisco · Cisco Ucs 6400 Series Fabric Interconnects +1

Name of the Vulnerable Software and Affected Versions: Cisco UCS 6400 Series Fabric Interconnects affected versions not specified Cisco UCS Manager Software affected versions not specified Description: The issue is related to the improper handling of CLI command parameters in the local management...

CVE-2020-3523: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface...

CVE-2020-3466: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerabilities exist because the web-based managemen...

CVE-2020-3491: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

PT-2020-19820

Name of the Vulnerable Software and Affected Versions iPECS affected versions not specified Description The issue is related to insecure permission handling of session cookies in the web-based management interface. An authenticated, remote attacker could exploit this by modifying the cookie value...

CVE-2020-7824: Privilege Defined With Unsafe Actions

A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnerability by modification the cookie valu...

Cisco Data Center Network Manager Multiple Vulnerabilities (Aug 2020)

According to its self-reported version, Cisco Data Center Network Manager is affected by multiple vulnerabilities. - A vulnerability in a specific REST API of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an...

Cisco Vision Dynamic Signage Director Web Management Interface Misconfiguration Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A misconfiguration vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from incorrect permissions in the Apache...

Cisco Vision Dynamic Signage Director Web Management Interface Cross-Site Scripting Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A cross-site scripting vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from the program failing to properly...

PT-2020-5086

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue is related to a cross-site scripting XSS attack in the web-based management interface. This occurs because the interface does not properly...

PT-2020-3766 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco DNA Center software. These vulnerabilities could allow an unauthenticated,...

PT-2020-3768

Name of the Vulnerable Software and Affected Versions: Cisco Vision Dynamic Signage Director affected versions not specified Description: The issue is related to incorrect permissions within the Apache configuration of the web-based management interface, allowing an unauthenticated, remote attack...

PT-2020-5222

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative...

PT-2020-5226

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative...

PT-2020-5064

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue is related to a cross-site scripting XSS attack in the web-based management interface of Cisco Data Center Network Manager DCNM Software. Thi...

PT-2020-4994

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM Software affected versions not specified Description The issue is related to a cross-site scripting XSS attack in the web-based management interface. This occurs because the interface does not properly...