CVE-2019-16005: Improper Neutralization of Special Elements used in a Command

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

CVE-2020-3129: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker...

CVE-2020-3121: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-suppli...

CVE-2019-16015: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...

CVE-2019-16024: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to...

PT-2020-1436

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection Software affected versions not specified Description The issue is related to insufficient input validation in the web-based management interface, which could allow a remote attacker to perform a stored cross-site scripti...

PT-2020-1653

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest versions 11.12 and earlier Description A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2020-1646

Name of the Vulnerable Software and Affected Versions Cisco Small Business Smart and Managed Switches affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2020-1433

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view sensitive information due to insufficient protection o...

PT-2020-1648

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA exists due to improper validation of user-supplied input. This could all...

Cisco Firepower Threat Defense Software WebVPN XSS (cisco-sa-20191002-asa-xss)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Firepower Threat Defense Software FTD allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2014-2650: Improper Neutralization of Special Elements used in an OS Command

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

PT-2020-7628

Name of the Vulnerable Software and Affected Versions Unify OpenStage / OpenScape Desk Phone IP versions prior to V3 R3.11.0 Description The issue concerns an OS command injection vulnerability in the web-based management interface of the affected device. Recommendations For versions prior to V3...

PT-2020-1652

Name of the Vulnerable Software and Affected Versions Cisco Crosswork Change Automation affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct...

PT-2020-1431

Name of the Vulnerable Software and Affected Versions Cisco UCS Director affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to download system log files from an affected device. The issue is due to a...

PT-2020-1375

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The issue is due to...

PT-2020-1642

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Description A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2020-1656

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to bypass authorization and access sensitive information related...

PT-2020-1651

Name of the Vulnerable Software and Affected Versions Cisco Data Center Analytics Framework affected versions not specified Description A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to...

CVE-2019-15990

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...