PT-2019-3506

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series versions affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an attacker to execute arbitrary code with...

PT-2019-3621

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series affected versions not specified Description The issue is related to errors in checking user requests to the web-based management interface. It could allow a remote attacker to cause a denial of service condition on an...

CVE-2019-15245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

PT-2019-3819

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface, which could allow an authenticated, remote attacker to conduct cross-site...

PT-2019-3496

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series versions affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an attacker to execute arbitrary code with...

PT-2019-3499

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

PT-2019-3495

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

PT-2019-3818

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an attacker to conduct cross-site scripting attacks. This...

PT-2019-3821

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center FMC affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to...

PT-2019-3937

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center FMC affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC, which could allow an...

PT-2019-3934

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attacker to...

PT-2019-3820

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the...

PT-2019-3505

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

PT-2019-3936

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center FMC affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center. These vulnerabilities could allow an...

PT-2019-3624

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper restrictions on configuration information in the web-based management interface, which could allow an authenticated...

PT-2019-3494

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

PT-2019-3502

Name of the Vulnerable Software and Affected Versions Cisco SPA100 Series Analog Telephone Adapters ATAs affected versions not specified Description The issue is related to improper validation of user-supplied input to the web-based management interface, which could allow an authenticated, adjace...

CVE-2019-15282: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the web-based management...

CVE-2019-15280: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient...

CVE-2019-15270: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of...