CVE-2018-0445

Cisco Packaged Contact Center Enterprise (PCCE) web-based management interface is affected by a CSRF vulnerability due to insufficient protections. An unauthenticated, remote attacker could entice a user to follow a crafted link and perform arbitrary actions on the device with the user’s privileg...

CVE-2018-15424

Cisco Identity Services Engine (ISE) web-based management interface contains multiple vulnerabilities that could allow an authenticated remote attacker to execute arbitrary commands on the device with the web server’s privileges. Affected component is the ISE web management interface; root cause ...

CVE-2018-0426 Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is...

CVE-2018-0445 Cisco Packaged Contact Center Enterprise Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

CVE-2018-0425

This CVE (CVE-2018-0425) affects Cisco RV110W/RV130W/RV215W routers, where the web-based management interface improperly enforces access control, allowing an unauthenticated, remote attacker to disclose sensitive configuration data including user credentials. The issue arises from insufficient fi...

CVE-2018-0444 Cisco Packaged Contact Center Enterprise Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

CVE-2018-15434

The CVE-2018-15434 entry refers to Cisco Unified IP Phone 7900 Series with a vulnerability in the web-based management interface. Affected component: the web-based management interface; root cause: insufficient validation of user-supplied input leading to cross-site scripting (XSS). Impact stated...

CVE-2018-0452

CVE-2018-0452 affects Cisco Tetration Analytics web-based management interface. The vulnerability is an unauthenticated XSS due to insufficient validation of user-supplied input in the web UI. An attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the i...

CVE-2018-15401

The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...

CVE-2018-0424 Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to...

CVE-2018-0445: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

CVE-2018-0450: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...

CVE-2018-0452: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0444: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the...

PT-2018-8841

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

PT-2018-13012

Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform 2100 affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduc...

PT-2018-8835

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

PT-2018-8822

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8821

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject and execute arbitrary commands with...

PT-2018-8830

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary...