CVE-2021-1358

CVE-2021-1358 affects Cisco Finesse’s web-based management interface. The flaw is an open redirect caused by improper validation of URL parameters in HTTP requests, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and be redirected to a malicious URL. Exploi...

CVE-2021-1254

Cisco Finesse’s web-based management interface contains cross-site scripting (XSS) vulnerabilities due to insufficient validation of user-supplied input. An authenticated attacker with administrator credentials can inject malicious scripts, potentially persuading users to click malicious links an...

CVE-2021-1555: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1548: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1547: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1550: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1487: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

CVE-2021-1553: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1554: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1254: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

PT-2021-3084

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input to the web-based management interface, which could allow...

PT-2021-3074

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3073

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3069

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3077

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3076

Name of the Vulnerable Software and Affected Versions Cisco Finesse affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This issue is due to improper input...

PT-2021-3070

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3071

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3082

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...