CVE-2021-1605: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1607: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1604: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

CVE-2021-1603: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user. These vulnerabilities exist because the web-based management interface does not...

PT-2021-3487

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue exists due to insufficient validation of user-supplied input in the web-based management interface. This could allow a remote attacker to conduct a stored...

PT-2021-3486

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The vulnerability exists in the web-based management interface of Cisco Identity Services Engine due to insufficient validation of user-supplied input. This could allow...

PT-2021-3488

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The web-based management interface of Cisco Identity Services Engine ISE has vulnerabilities that could allow an authenticated, remote attacker to conduct a stored...

PT-2021-3484

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The web-based management interface of Cisco Identity Services Engine ISE has vulnerabilities that could allow an authenticated, remote attacker to conduct a stored...

PT-2021-3588

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Voice Browser affected versions not specified Description A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow an unauthenticated, remote attacker to conduct a cross-site...

PT-2021-3485

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The web-based management interface of Cisco Identity Services Engine ISE has multiple vulnerabilities that could allow an authenticated, remote attacker to conduct ...

PT-2021-20802

Name of the Vulnerable Software and Affected Versions: Zyxel USG/Zywall series firmware versions 4.35 through 4.64 Zyxel USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01 Description: An authentication bypass vulnerability in the web-based management interface could allow a remote...

Cisco Data Center Network Manager Authorization Bypass Vulnerabilities (cisco-sa-dcnm-authbypass-OHBPbxu)

The version of Cisco Data Center Network Manager installed on the remote host is prior to 11.51. It is, therefore, affected by multiple vulnerabilities in the web-based management interface. A remote, authenticated attacker can exploit these to view, modify, and delete data without proper...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vman-pathtrav-Z5mCVsjf)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending crafted HTTP requests, in order to conduct pat...

CVE-2021-1571

CVE-2021-1571 affects Cisco Small Business 220 Series Smart Switches’ web-based management interface. The issue stems from improper checks of parameter values, enabling multiple vulnerabilities: session hijacking, potential arbitrary command execution as root, cross-site scripting (XSS), and HTML...

PT-2021-3753

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface, which could allow an attacker to hijack a user session, execute...

PT-2021-13523

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: The web-based management interface of the affected switches has multiple issues that could allow an attacker to hijack a user session, execute arbitra...

PT-2021-7443

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center affected versions not specified Cisco Unified Contact Center Express affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote...

PT-2021-3754

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface, which could allow an attacker to hijack a user session, execute...

CVE-2021-1395: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not...

Command injection

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...