CVE-2013-1125

Summary: CVE-2013-1125 affects Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, an...

CVE-2009-0615

CVE-2009-0615 concerns directory traversal in Cisco ANM before 2.0 and ACE Device Manager before A3(2.1). Exploitation by an authenticated remote user could read/modify arbitrary files, potentially exposing host OS data due to invalid directory permissions. Related CVEs cover additional ANM flaws...

CVE-2013-1196

The CVE-2013-1196 entry involves multiple Cisco products (ACS, Identity Services Engine, ANM, LMS, Prime NSM/DCNM, Quad, etc.) where the command-line interface does not properly validate input, allowing local users to obtain root privileges via unspecified vectors. Connected documents corroborate...

CVE-2009-0617

CVE-2009-0617 affects Cisco ANM (Application Networking Manager) prior to version 2.0, where ANM uses a default MySQL root password. This creates a risk of remote command execution or modification of system files on the underlying host OS, as described in Cisco’s advisory and NVD/NVD-derived cont...

CVE-2009-0618

CVE-2009-0618 concerns the Cisco Application Networking Manager (ANM) Java agent privilege escalation. The connected advisories/records indicate that ANM versions prior to 2.0 Update A allow a remote attacker to view configuration files and modify ANM processes, including stopping services, poten...

CVE-2015-0651

CVE-2015-0651 is a CSRF vulnerability affecting Cisco Application Networking Manager (ANM) and the Device Manager (DM) on the Cisco ACE 4710 appliance. The issue stems from insufficient CSRF protections in the web GUI, allowing an unauthenticated, remote attacker to force arbitrary requests in th...

CVE-2009-0616

Cisco ANM (and ACE Device Manager) prior to listed fixed releases contain a default credentials vulnerability. ANM 2.0 and earlier allow remote access or DoS via unchanged admin/MySQL/default credentials; Java agent privilege escalation also reported. The advisory fixes include ANM 2.0 Update A a...