CVE-2018-15457: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

PT-2019-1286

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected...

PT-2019-1284

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Management Suite affected versions not specified Description A vulnerability in the web-based management interface of Cisco TelePresence Management Suite could allow an unauthenticated, remote attacker to conduct a cross-sit...

PT-2019-1283

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure affected versions not specified Description A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS...

PT-2019-1362

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Control System affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an authenticated, remote attacker to...

CVE-2018-15451 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplie...

CVE-2018-15449 Cisco Video Surveillance Media Server Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service DoS of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15445: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15449: Improper Input Validation

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service DoS of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of...

CVE-2018-15393: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Content Security Management Appliance SMA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to...

CVE-2018-15451: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplie...

Cisco Video Surveillance Media Server Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service DoS of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of...

PT-2018-1831

Name of the Vulnerable Software and Affected Versions: Cisco Prime Service Catalog affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing for cross-site scripting XSS attacks. An attacker could exploit this by persuading a...

PT-2018-1780

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite Software affected versions not specified Description The issue is related to insufficient CSRF protections in the web-based management interface, allowing an authenticated, remote attacker to conduct a cross-site...

PT-2018-2130

Name of the Vulnerable Software and Affected Versions Cisco SocialMiner affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct a stored...

CVE-2018-15438: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF...

CVE-2018-15435: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied...

CVE-2018-0451

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0452

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...