CVE-2017-6761

Cisco Finesse’s web-based management interface (versions 10.6(1) and 11.5(1)) is affected by a cross-site scripting (XSS) vulnerability due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling execution of ...

CVE-2017-6765

CVE-2017-6765 affects Cisco ASA WebVPN via the web-based management interface. Affected are ASA software 9.1(6.11) and 9.4(1.2). Root cause: insufficient validation of user-supplied input in the web UI, enabling cross-site scripting (XSS) when a user clicks a crafted link. Impact: an unauthentica...

CVE-2017-6762: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

CVE-2017-6769: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected system. More Information: CSCve70587. Known...

CVE-2017-6761: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Finesse 10.61 and 11.51 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

PT-2017-17300

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server versions 10.69 through 11.01 Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker to conduct a...

PT-2017-17299

Name of the Vulnerable Software and Affected Versions Cisco Finesse versions 10.61 through 11.51 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The issu...

PT-2017-17293

Name of the Vulnerable Software and Affected Versions Cisco Smart Net Total Care SNTC Software Collector Appliance version 3.11 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack. This...

CVE-2017-6765: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...

CVE-2017-6764: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.51 could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Adaptive Security Appliance Authenticated Cross-Site Scripting Vulnerability (cisco-sa-20170802-asa)

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbone Networks...

Cisco Smart Net Total Care Contracts Details Page SQL Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Contracts Details Page could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system...

Cisco Finesse Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6749

CVE-2017-6749 describes a stored cross-site scripting (XSS) vulnerability in the Cisco Web Security Appliance (WSA) web-based management interface. An authenticated, remote attacker can exploit this by convincing a user to follow a crafted link, triggering script execution in the user’s browser s...

CVE-2017-6749: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

PT-2017-17289

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 10.1.0-204 Description A stored cross-site scripting XSS attack can be conducted by an authenticated, remote attacker against a user of the web-based management interface of an affected device. This...

PT-2017-17285

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software versions 1.30.909 through 2.10.800 Description A cross-site scripting XSS issue exists in the web-based management interface of the software, specifically related to the Guest Portal. This could allo...

CVE-2017-6734: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected device, related to the Guest Portal. More Information:...