CVE-2017-6769

Cisco Secure Access Control System (ACS) web-based management interface contains a stored XSS vulnerability. An authenticated, remote attacker could exploit insufficient input validation and lack of encoding to inject malicious scripts affecting users of the ACS web UI. Affected releases include ...

CVE-2017-6762

CVE-2017-6762 affects Cisco Jabber Guest Server’s web-based management interface (versions 10.6(9), 11.0(0), 11.0(1)). The issue is due to insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to deliver a crafted link that could execute arbitrary script wit...

CVE-2017-6769

A vulnerability in the web-based management interface of the Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected system. More Information: CSCve70587. Known...

CVE-2017-6761

Cisco Finesse’s web-based management interface (versions 10.6(1) and 11.5(1)) is affected by a cross-site scripting (XSS) vulnerability due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling execution of ...

CVE-2017-6765

CVE-2017-6765 affects Cisco ASA WebVPN via the web-based management interface. Affected are ASA software 9.1(6.11) and 9.4(1.2). Root cause: insufficient validation of user-supplied input in the web UI, enabling cross-site scripting (XSS) when a user clicks a crafted link. Impact: an unauthentica...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-27829)

IBM iNotes also known as IBM Lotus iNotes is the United States IBM's set of Web-based e-mail software. A cross-site scripting vulnerability exists in IBM iNotes versions 8.5 and 9.0. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the Web UI...

CVE-2017-6762: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.69, 11.00, and 11.01 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability ...

CVE-2017-6769: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected system. More Information: CSCve70587. Known...

CVE-2017-6761: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Finesse 10.61 and 11.51 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

PT-2017-17300

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server versions 10.69 through 11.01 Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker to conduct a...

PT-2017-17299

Name of the Vulnerable Software and Affected Versions Cisco Finesse versions 10.61 through 11.51 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The issu...

PT-2017-17293

Name of the Vulnerable Software and Affected Versions Cisco Smart Net Total Care SNTC Software Collector Appliance version 3.11 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack. This...

CVE-2017-6765: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...

CVE-2017-6764: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.51 could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Adaptive Security Appliance Authenticated Cross-Site Scripting Vulnerability (cisco-sa-20170802-asa)

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbone Networks...

Cisco Adaptive Security Appliance Authenticated Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Smart Net Total Care Contracts Details Page SQL Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Contracts Details Page could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system...

Cisco Finesse Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of...

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient...

Cisco Web Security Appliance Multiple Vulnerabilities

According to its self-reported version, the remote Cisco Web Security Appliance WSA device is affected by one or more vulnerabilities : - An unspecified flaw exists in the web-based interface due to improper validation of user-supplied input. An authenticated, remote attacker who has valid...