PT-2020-1648

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA exists due to improper validation of user-supplied input. This could all...

PT-2020-1433

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view sensitive information due to insufficient protection o...

PT-2020-1646

Name of the Vulnerable Software and Affected Versions Cisco Small Business Smart and Managed Switches affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2020-1653

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest versions 11.12 and earlier Description A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

Cisco Firepower Threat Defense Software WebVPN XSS (cisco-sa-20191002-asa-xss)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Firepower Threat Defense Software FTD allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

SAP Identity Management REST Interface Privilege Escalation

The vulnerability of the REST Interface Version 2 interface of the SAP Identity Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2014-2650

The CVE concerns Unify OpenStage / OpenScape Desk Phone IP (pre-V3 R3.11.0) where the web-based management interface is vulnerable to OS command injection. Root cause is improper handling of input in the management UI, enabling an attacker to execute arbitrary commands on the device. CVSS data in...

PT-2020-7628

Name of the Vulnerable Software and Affected Versions Unify OpenStage / OpenScape Desk Phone IP versions prior to V3 R3.11.0 Description The issue concerns an OS command injection vulnerability in the web-based management interface of the affected device. Recommendations For versions prior to V3...

CVE-2014-2650: Improper Neutralization of Special Elements used in an OS Command

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2020-03722)

Cisco Finesse is a next-generation agent and supervisor desktop designed to enhance the customer service experience in contact centers. A cross-site scripting vulnerability exists in the Web management interface in Cisco Finesse that stems from the software's failure to clean up incoming requests...

Cisco Emergency Responder Stored Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of some parameters that are passed...

PT-2020-1431

Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to download system log files from an affected device. The issue is due to a...

PT-2020-1652

Name of the Vulnerable Software and Affected Versions Cisco Crosswork Change Automation affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct...

PT-2020-1642

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Description A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2020-1375

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The issue is due to...

PT-2020-1651

Name of the Vulnerable Software and Affected Versions Cisco Data Center Analytics Framework affected versions not specified Description A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to...

PT-2020-1656

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to bypass authorization and access sensitive information related...

Cisco Data Center Network Manager Authentication Bypass Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An authentication bypass vulnerability exists in the Web management interface of...

PT-2020-7451

Name of the Vulnerable Software and Affected Versions: Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before SMT X9 317 Intelligent Platform Management Interface IPMI with firmware for Supermicro X8 generation motherboards before SMT X8 312...

CVE-2013-3620: Insufficiently Protected Credentials

Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...