CVE-2021-34774: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when...

CVE-2021-34773: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...

CVE-2021-34784: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an...

PT-2021-4812

Name of the Vulnerable Software and Affected Versions Cisco Small Business 200 Series Smart Switches versions affected versions not specified Cisco Small Business 300 Series Managed Switches versions affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches versio...

PT-2021-5133

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions n...

PT-2021-5039

Name of the Vulnerable Software and Affected Versions Cisco Webex Video Mesh affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct a cross-si...

PT-2021-5134

Name of the Vulnerable Software and Affected Versions Cisco Prime Access Registrar affected versions not specified Description A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripti...

PT-2021-4814

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector affected versions not specified Description The issue is related to the web-based management interface of Cisco Common Services Platform Collector, where errors occur when responding to a correct API...

PT-2021-4961

Name of the Vulnerable Software and Affected Versions Cisco Catalyst PON Series Switches Optical Network Terminal ONT affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the Cisco Catalyst PON Series Switches Optica...

PT-2021-5196

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description The issue is related to the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved...

PT-2021-7007

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Description The issue is related to insufficient checking of...

PT-2021-6882

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to improper enforcement of administrative privilege levels for high-value sensitive data in the web-based management interface of Cisco Identity...

PT-2021-6884

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics affected versions not specified Description A vulnerability in the web-based management interface of the Network Diagrams application could allow an authenticated, remote attacker to conduct a cross-site scriptin...

PT-2021-7234

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive...

PT-2021-7241

Name of the Vulnerable Software and Affected Versions Cisco AppDynamics Controller Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a...

PT-2021-6883

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site...

PT-2021-7015

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Cisco Unity Connection versions affected versions not...

PT-2021-7003

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description A vulnerability in the web-based management interface could allow an...

PT-2021-6873

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Description A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to...

PT-2021-7022

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct SQL injection...