1038 matches found
Cisco Context Directory Agent Hidden Input Vulnerability
A vulnerability in certain input fields of Cisco Context Directory Agent CDA could allow an authenticated, remote attacker to hide values that are entered in the affected input fields. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...
Cisco Adaptive Security Appliance RADIUS Change of Authorization Message Replay Vulnerability
A vulnerability in RADIUS Change of Authorization CoA messages of the Identity Firewall IDFW feature of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to modify the contents of the IDFW user cache. The vulnerability is due to insufficient validation of...
Cisco Unified Communications Manager Role Bypass Vulnerability
A vulnerability in the administration portal of Cisco Unified Communications Manager Unified CM could allow an authenticated, remote attacker to bypass role restrictions. The vulnerability is due to insufficient role restriction processing. An attacker could exploit this vulnerability by revisiti...
Cisco IOS XE Crafted MPLS IP Fragmentation Denial of Service Vulnerability
A vulnerability in the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco IOS XE could allow an unauthenticated, remote attacker to cause the Cisco Packet Processor to crash. The vulnerability is due to input validation processing of the crafted MPLS IP packets. An attacker cou...
Cisco NX-OS Directory Traversal Vulnerability
A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to delete arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the filesys...
Cisco Unified Communications Manager Sensitive Information Disclosure Vulnerability
A vulnerability in the disaster recovery system DRS of Cisco Unified Communications Manager UCM could allow an authenticated, remote attacker to acquire sensitive information about DRS-related devices. The vulnerability is due to extraneous information included in the web page. An attacker could...
Cisco WebExCollaboration Partner Access控制台跨站脚本漏洞
Bugtraq ID:64288 CVE ID:CVE-2013-6961 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Meeting Center Collaboration Partner Access Console CPAC存在一个跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 Cisco WebEx Meeting Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Sales Center开放重定向漏洞
Bugtraq ID:64271 CVE ID:CVE-2013-6959 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： IBM ----- 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-695...
Cisco WebEx Training Center开放重定向漏洞
Bugtraq ID:64287 CVE ID:CVE-2013-6971 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
Cisco WebEx Training Center Email验证绕过音频会议加入漏洞
Bugtraq ID:64281 CVE ID:CVE-2013-6965 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面存在安全漏洞，允许未验证远程攻击者无需要提供合法Email地址加入培训会议的音频会议。漏洞是由于注册结束之前泄漏了培训会话信息URL，攻击者可收集泄漏URL中的培训会话访问代码和密码，使用这些信息加入受限会议。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信...
Cisco WebEx Collaboration Partner Access Console Cross-Site Scripting Vulnerability
A vulnerability in the Collaboration Partner Access Console CPAC of Cisco WebEx Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...
Cisco WebEx Meeting Center Mobile Browser Redirection Cross-Site Scripting Vulnerability
A vulnerability in how mobile browsers redirect to the mobile version of Cisco WebEx Meeting Center sites could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could...
Cisco WebEx Training Center Training Registration Cross-Site Scripting Vulnerability
A vulnerability in the training center registration page of Cisco WebEx Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...
Cisco WebEx Business Suite Site Access Control Bypass Vulnerability
A vulnerability in the site access control implementation of Cisco WebEx Business Suite could allow an authenticated, remote attacker to inject content from the attacker-controlled WebEx site into another WebEx site. The vulnerability is due to insufficient validation of user-supplied input. An...
Cisco WebEx Sales Center Open Redirect Vulnerability
A vulnerability in Cisco WebEx Sales Center could allow an unauthenticated, remote attacker to cause WebEx Sales Center to issue a redirect to an arbitrary attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Sales Center. An attacker could exploit this...
Cisco WebEx Training Center Cross-Site Request Forgery Vulnerabilities
A vulnerability in the web framework of Cisco WebEx Training Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by persuading a user to...
Cisco WebEx Multiple Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in Cisco WebEx Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by convincing a user ...
Cisco WebEx Training Center Open Redirect Vulnerability
A vulnerability in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to cause the Cisco WebEx Training Center to issue a redirect to an arbitrary attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Training Center. An attacker could...
Cisco WebEx Training Center Registered Attendee Email Enumeration Vulnerability
A vulnerability in the training registration page in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to enumerate email addresses of registered attendees. The vulnerability is due to registration error messages that allow a user to determine that an email address...
Cisco WebEx Training Center Open Redirect Vulnerability
A vulnerability in Cisco WebEx Training Center could allow an unauthenticated, remote attacker to cause the Cisco WebEx Training Center to issue a redirect to an arbitrary attacker-supplied URL. The vulnerability is due to an open redirect issue in Cisco WebEx Training Center. An attacker could...