Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2023-93326)

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services Engine suffers from...

Input validation

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could exploit this...

CVE-2023-20272

Cisco Identity Services Engine (ISE) is affected by an arbitrary file write vulnerability in its web-based management interface. The issue stems from insufficient file input validation, allowing an authenticated, remote attacker to upload a malicious file to the web root and potentially replace f...

CVE-2023-20208

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device...

CVE-2023-20208

Cisco ISE web-based management interface is affected by a cross-site scripting (XSS) vulnerability (CVE-2023-20208) that can be exploited by an authenticated, remote attacker with high privileges to perform an XSS against users. The issue stems from insufficient input validation/escaping of user-...

CVE-2023-20265

A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation ...

CVE-2023-20265

CVE-2023-20265 is a stored XSS vulnerability in the web-based management interface of a subset of Cisco IP Phones. Root cause: insufficient validation of user-supplied input; an authenticated, remote attacker needs valid credentials to lure a user into viewing a page containing malicious HTML/scr...

Design/Logic Flaw

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management...

CVE-2023-4149

CVE-2023-4149 affects WAGO Industrial Managed Switch family, where the web-based management interface is vulnerable to unauthenticated remote command injection via user request handling. The root cause is improper handling/validation of commands in the web UI, allowing an attacker to execute arbi...

CVE-2023-3379 WAGO: Improper Privilege Management in web-based management

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges...

CVE-2023-20196

Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of...

Input validation

Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of...

CVE-2023-20195

Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of...

CVE-2023-20074

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...

CVE-2023-20005

CVE-2023-20005 concerns Cisco Firepower Management Center (FMC) Web UI vulnerabilities where insufficient validation of user-supplied input enables stored cross-site scripting. The issue affects the FMC web-based management interface and could allow an unauthenticated, remote attacker to insert c...

CVE-2023-20074

CVE-2023-20074 : Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities caused by insufficient validation of user-supplied input. An unauthenticated, remote attacker could inject crafted input into data fields to execute arbitrary...

CVE-2023-20206

Cisco Firepower Management Center (FMC) web-based management interface is affected by stored cross-site scripting (XSS) vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker could insert crafted input in various interface fields to execute arbitrary script code...

CVE-2023-20041

Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities caused by insufficient validation of user-supplied input in the interface. Affects FMC software; attacker could exploit crafted input in various data fields to execute arbitra...

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due...