PT-2017-16126

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Switches versions 11.01.10000.10 through 11.51.10000.6 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS...

PT-2017-16141

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.0 through 11.5 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

CVE-2016-9222

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

CVE-2016-9222: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

PT-2017-10000

Name of the Vulnerable Software and Affected Versions Cisco NetFlow Generation Appliance version 1.02 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing an unauthenticated, remote attacker to conduct an XSS attack against users of the interface...

PT-2017-16103

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 11.01.10000.10 through 11.51.10000.6 Description A cross-site scripting XSS filter bypass issue in the web-based management interface could allow an unauthenticated, remote attacker to mount XSS...

PT-2017-16110

Name of the Vulnerable Software and Affected Versions Cisco IOS Software version 1.00 Cisco IOx Software version 1.00 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to view confidential information without authenticating to the...

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6...

CVE-2016-6468

The CVE-2016-6468 issue affects Cisco Emergency Responder’s web-based management interface. A CSRF vulnerability could allow an unauthenticated, remote attacker to perform arbitrary actions on an affected device due to insufficient CSRF protections. Known affected release: 11.5(1.10000.4); known ...

PT-2016-6943

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center running FireSIGHT System software version 5.4.1.6 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view the Remote Storage Password...

PT-2016-6940

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.51.10000.4 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions...

PT-2016-7698

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA Switches versions 9.1.1-036 through 9.7.1-066 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS...

CVE-2016-9202: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an affected device. More Information: CSCvb37346...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...

CVE-2016-6461: Improper Input Validation

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

PT-2016-6871

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions prior to 6.1 Cisco FireSIGHT System Software versions prior to 6.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote authenticated users to...