Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

Design/Logic Flaw

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

CVE-2016-1472: Improper Input Validation

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

PT-2016-4818

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site request forgery CSRF issue exists in the web-based management interface, allowing remote attackers to hijack the authentication of arbitrary users...

PT-2016-4819

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-1470: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

PT-2016-4820

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware prior to 1.0.1.1 Description The issue affects the web-based management interface, allowing remote attackers to cause a denial of service, resulting in an interface outage. This can be achieved vi...

CVE-2016-1471: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

PT-2016-4810

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog version 11.0 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted value. Recommendations For Cisco...

CVE-2016-1462: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

PT-2016-4799

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server versions 1.7 through 1.9 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via crafted parameters. Recommendations F...

CVE-2016-1451: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

PT-2016-4762

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions through 1.2.1.4 Cisco RV130W versions through 1.0.2.7 Cisco RV215W versions through 1.3.0.7 Description A buffer overflow issue exists in the web-based management interface, allowing remote authenticated users to cause a...

Cisco Unified Contact Center Enterprise Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to...

CVE-2016-1397

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...