PT-2020-2882

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions not specified Cisco Small Business RV325 versions not specified Cisco Small Business RV016 versions not specified Cisco Small Business RV042 versions not specified Cisco Small Business RV082 versions not...

PT-2020-2958

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions not specified Cisco Small Business RV325 versions not specified Cisco Small Business RV016 versions not specified Cisco Small Business RV042 versions not specified Cisco Small Business RV082 versions not...

PT-2020-2978

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an authenticated, remote attacker with administrative...

PT-2020-2962

Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description The issue is related to insufficient validation of user-supplied input on the web-based management interface, allowing a path traversal attack. This could enable an authenticated,...

CVE-2020-3339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

CVE-2020-3184 Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

CVE-2020-3184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

PT-2020-3053

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected...

CVE-2020-3256 Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment HCM-F Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need...

PT-2020-2503

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment HCM-F Software affected versions not specified Description The issue is related to the improper handling of XML External Entity XXE entries when parsing certain XML files in the web-based...

CVE-2020-3261

CVE-2020-3261 refers to a CSRF vulnerability in Cisco Mobility Express Software’s web-based management interface. The issue arises from insufficient CSRF protections, enabling an unauthenticated attacker to trick an active session user into performing arbitrary actions, including configuration ch...

CVE-2020-3261 Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based managemen...

PT-2020-2422

Name of the Vulnerable Software and Affected Versions Cisco Mobility Express Software affected versions not specified Cisco Aironet Access Points AP series 1540, 1560, 1800, 2800, 3800, 4800 Cisco Catalyst 9100 Cisco 6300 Description A vulnerability in the web-based management interface could all...

CVE-2020-3261: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based managemen...

CVE-2019-16010 Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the vManage software. The vulnerability is due to insufficient validation of...

Cisco Prime Collaboration Provisioning Information Disclosure (cisco-sa-prim-collab-disclo-FAnX4DKB)

According to its self-reported version, Cisco Prime Collaboration Provisioning is affected by an information disclosure vulnerability in the web-based management interface because replies from the web-based management interface include unnecessary server information. An unauthenticated, remote...

CVE-2020-3157 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied...

CVE-2020-3157

Cisco ISE (Identity Services Engine) web-based management interface is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of user-supplied input. An authenticated attacker with write permissions can craft and save a malicious configuration, enabling script execution in the ad...

CVE-2020-3193 Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-based management interface include...

CVE-2020-3193

CVE-2020-3193 concerns Cisco Prime Collaboration Provisioning; the web-based management interface reveals unnecessary server information in responses, allowing unauthenticated remote attackers to obtain details about the OS and web server version. Root cause: information disclosure via standard i...