CVE-2018-0459

CVE-2018-0459 concerns Cisco Enterprise NFV Infrastructure Software (NFVIS) where the web‑based management interface has insufficient server‑side authorization checks. An authenticated, low‑privileged user can send a crafted HTTP request and potentially reboot or shut down the affected system, im...

CVE-2018-0444 Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

CVE-2018-0439 Cisco Meeting Server Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the...

CVE-2018-15434

The CVE-2018-15434 entry refers to Cisco Unified IP Phone 7900 Series with a vulnerability in the web-based management interface. Affected component: the web-based management interface; root cause: insufficient validation of user-supplied input leading to cross-site scripting (XSS). Impact stated...

CVE-2018-0452

CVE-2018-0452 affects Cisco Tetration Analytics web-based management interface. The vulnerability is an unauthenticated XSS due to insufficient validation of user-supplied input in the web UI. An attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the i...

CVE-2018-15401

The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...

CVE-2018-0424 Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to...

CVE-2018-0425

This CVE (CVE-2018-0425) affects Cisco RV110W/RV130W/RV215W routers, where the web-based management interface improperly enforces access control, allowing an unauthenticated, remote attacker to disclose sensitive configuration data including user credentials. The issue arises from insufficient fi...

CVE-2018-15436 Cisco Webex Centers Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based...

CVE-2018-0445: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

CVE-2018-0450: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...

CVE-2018-0452: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0444: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

PT-2018-8841

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2018-13012

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform 2100 affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduc...

PT-2018-8835

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

PT-2018-8822

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8821

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8830

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary...

PT-2018-8846

Name of the Vulnerable Software and Affected Versions Cisco Small Business 300 Series Managed Switches affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an unauthenticated, remote...