CVE-2021-1499: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerabilit...

CVE-2021-1284: Improper Access Control

A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass authentication and authorization and modify the configuration of an affected system. To exploit this vulnerability, the attacker must be able t...

CVE-2021-1401: Improper Privilege Management

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more informatio...

CVE-2021-1365: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

CVE-2021-1498: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1490: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to improper...

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more informatio...

Cisco Integrated Management Controller Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

PT-2021-2976

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description A vulnerability in the API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against use...

PT-2021-3258

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA, Cisco Email Security Appliance ESA, and Cisco Web Security Appliance WSA affected versions not specified Description The issue is related to insufficient protection of...

PT-2021-3254

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to a malicious web page du...

PT-2021-3275

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex HX Data Platform affected versions not specified Description A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affect...

PT-2021-3255

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions affected versions not specified Description A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker t...

CVE-2021-1498

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Recent...

CVE-2021-1497

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Recent...

PT-2021-2973

Name of the Vulnerable Software and Affected Versions BroadWorks Messaging Server affected versions not specified Description The issue is related to the improper restriction of XML external entity references in the web-based management interface of the BroadWorks Messaging Server. This could all...

PT-2021-2975

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service affected versions not specified Description The issue is related to improper validation of user-submitted parameters in the web-based management interface, allowing an authenticated,...

PT-2021-2962

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of certain Cisco Small Business Wireless...