PT-2018-8645

Name of the Vulnerable Software and Affected Versions: Cisco UCS Director Software affected versions not specified Cisco Integrated Management Controller IMC Supervisor Software affected versions not specified Description: A vulnerability in the web-based management interface could allow an...

CVE-2018-0145

A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability is due to...

CVE-2018-0206: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...

CVE-2018-0206

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...

PT-2018-8643

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack...

PT-2018-2468

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack again...

CVE-2017-6225

CVE-2017-6225 affects Brocade Fabric OS Web GUI: cross-site scripting due to improper input validation in the web-based management interface. A remote attacker could execute arbitrary script in a victim’s browser or access sensitive information. Affected products include Brocade Fibre Channel SAN...

CVE-2018-0129

CVE-2018-0129 is a reflected cross-site scripting (XSS) vulnerability in Cisco Data Center Analytics Framework (DCAF) web-based management interface. Unauthenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution in the user’s browser context or ...

CVE-2018-0128

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

CVE-2018-0129: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

CVE-2017-6225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS FOS versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information...

PT-2018-8322

Name of the Vulnerable Software and Affected Versions Brocade Fibre Channel SAN products running Brocade Fabric OS FOS versions prior to 7.4.2b Brocade Fibre Channel SAN products running Brocade Fabric OS FOS versions prior to 8.1.2 Brocade Fibre Channel SAN products running Brocade Fabric OS FOS...

PT-2018-8632

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack...

PT-2018-8631

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Analytics Framework affected versions not specified Description: The issue is related to a stored cross-site scripting XSS attack in the web-based management interface. This is due to insufficient validation of user-supplied...

CVE-2018-0128: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

Cisco Data Center Analytics Framework Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

Cross site scripting

A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet PoE and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attac...

CVE-2018-0098

A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet PoE and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attac...

CVE-2018-0091

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a Document Object Model DOM cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

CVE-2018-0091

Cisco ISE DOM-based XSS (CVE-2018-0091) affects the web-based management interface of Cisco Identity Services Engine. The vulnerability arises from insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to entice a user to click a malicious link and run arbit...