PT-2017-10000

Name of the Vulnerable Software and Affected Versions Cisco NetFlow Generation Appliance version 1.02 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing an unauthenticated, remote attacker to conduct an XSS attack against users of the interface...

PT-2017-16103

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 11.01.10000.10 through 11.51.10000.6 Description A cross-site scripting XSS filter bypass issue in the web-based management interface could allow an unauthenticated, remote attacker to mount XSS...

PT-2017-16110

Name of the Vulnerable Software and Affected Versions Cisco IOS Software version 1.00 Cisco IOx Software version 1.00 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to view confidential information without authenticating to the...

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6...

CVE-2016-6468

The CVE-2016-6468 issue affects Cisco Emergency Responder’s web-based management interface. A CSRF vulnerability could allow an unauthenticated, remote attacker to perform arbitrary actions on an affected device due to insufficient CSRF protections. Known affected release: 11.5(1.10000.4); known ...

CVE-2016-9202: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an affected device. More Information: CSCvb37346...

PT-2016-6940

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.51.10000.4 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions...

PT-2016-6943

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center running FireSIGHT System software version 5.4.1.6 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view the Remote Storage Password...

PT-2016-7698

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA Switches versions 9.1.1-036 through 9.7.1-066 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...

CVE-2016-6461: Improper Input Validation

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

PT-2016-6871

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions prior to 6.1 Cisco FireSIGHT System Software versions prior to 6.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote authenticated users to...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

CVE-2016-1471: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

CVE-2016-1472: Improper Input Validation

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

CVE-2016-1470: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

PT-2016-4818

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site request forgery CSRF issue exists in the web-based management interface, allowing remote attackers to hijack the authentication of arbitrary users...

PT-2016-4820

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware prior to 1.0.1.1 Description The issue affects the web-based management interface, allowing remote attackers to cause a denial of service, resulting in an interface outage. This can be achieved vi...

PT-2016-4819

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...