CVE-2020-3464: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interfa...

CVE-2020-3463: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected service. The vulnerability is due to insufficient...

Cisco Data Center Network Manager XSS (cisco-sa-dcnm-xss-3jkDLsLV)

According to its self-reported version, Cisco Data Center Network Manager is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to a failure to properly validate user-supplied input. An unauthenticated, remote attacker can exploit this, by intercepting ...

Cisco Unified Communications Manager Cross-Site Scripting (cisco-sa-cucm-selfcare-drASc7sr)

According to its self-reported version, Cisco Unified Communications Manager is affected by a Cross-Site Scripting vulnerability that could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficien...

Cisco Data Center Network Manager Information Disclosure (cisco-sa-dcnm-info-disclosure-tFX3KerC)

According to its self-reported version, Cisco Data Center Network Manager is affected by an information disclosure vulnerability in the web-based management interface due to missing authentication on a specific part of this interface. An unauthenticated, remote attacker can exploit this, by sendi...

CVE-2020-7029

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-7029 Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-13175

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...

Remote file inclusion

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...

CVE-2020-13175

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...

PT-2020-19346

Name of the Vulnerable Software and Affected Versions Avaya Aura Communication Manager versions 7.0.x, 7.1.x through 7.1.3.4, 8.0.x Avaya Aura Messaging versions 7.0.x, 7.1, 7.1 SP1 Description A Cross-Site Request Forgery CSRF issue was found in the System Management Interface Web component. Thi...

PT-2020-13374

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to 15 Teradici Cloud Access Connector Legacy versions prior to April 20, 2020 Description The issue allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP...

CVE-2020-7029: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged...

CVE-2020-13175: Improper Control of Filename for Include/Require Statement in PHP Program

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...

CVE-2020-13176: Improper Neutralization of Input During Web Page Generation

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 v16 and earlier for the Cloud Access Connector contains a stored cross-site scripting XSS vulnerability which allows a remote unauthenticated attacker to poison l...

PT-2020-13375

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to 16 Teradici Cloud Access Connector Legacy versions prior to April 24, 2020 Description The Management Interface contains a stored cross-site scripting XSS issue, allowing a remote unauthenticat...

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web management interface in Cisco Webex Meetings versions prior to T40.6.0, which stems from the program failing to adequately validate user-submitted input. The...

Cisco UCS Director Cross-Site Scripting Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. A cross-site scripting vulnerability exists in the web management interface in Cisco UCS Director versions prior to 6.7.4.1, which stems from the program failing to properly validate inpu...

Cisco Webex Meetings Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected service. The vulnerability is due to insufficient...

PT-2020-4224

Name of the Vulnerable Software and Affected Versions: Cisco UCS Director affected versions not specified Description: A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site...