CVE-2019-15956

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...

CVE-2019-15973 Cisco Industrial Network Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected application. The vulnerability is due to insufficient validati...

CVE-2019-15271: Deserialization of Untrusted Data

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability ...

CVE-2019-15968: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

CVE-2019-15990: Improper Authorization

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

CVE-2019-15973: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected application. The vulnerability is due to insufficient validati...

CVE-2019-15972: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. ...

CVE-2019-15994: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

PT-2019-4322

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injecti...

PT-2019-4236

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a...

PT-2019-4234

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers affected versions not specified Cisco Small Business RV016 affected versions not specified Cisco Small Business RV042 affected versions not specified Cisco Small Business RV042G affected versions not...

PT-2019-4235

Name of the Vulnerable Software and Affected Versions Cisco Stealthwatch Enterprise affected versions not specified Description The issue is related to the web-based management interface of Cisco Stealthwatch Enterprise, where insufficient validation of user-supplied input allows for a cross-site...

Vulnerability discovered in F5 BIG-IP and BIG-IQ

F5 has discovered a vulnerability in BIG-IP and BIG-IQ products. The vulnerability is located in lodash version 4.17.12, a javascript programming library. A malicious person with access to the Traffic Management User Interface TMUI or the iControl REST API could exploit the vulnerability to execu...

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

According to its self-reported version, Cisco Identity Services Engine Software is affected by a vulnerability. A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31993)

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. A cross-site scripting vulnerability exists in the Web management interface in versions...

GHSA-7QQR-3PJ3-Q2F5 XSS issues in the management interface

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface...

Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface of an affected device. The vulnerability is due to insufficient validation of...

PT-2019-3962

Name of the Vulnerable Software and Affected Versions Cisco RV Series Routers affected versions not specified Cisco Small Business RV016 affected versions not specified Cisco Small Business RV042 affected versions not specified Cisco Small Business RV042G affected versions not specified Cisco Sma...

PT-2019-4039

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director affected versions not specified Description The issue is related to insufficient protection of the web page structure in the Cisco Industrial Network Director's web-based management interface. This could allow...