Lucene search

K
CiscoEnterprise Network Function Virtualization Infrastructure

10 matches found

CVE
CVE
added 2019/08/07 9:15 p.m.79 views

CVE-2019-1895

A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected device. The vulnerability is due to an ins...

9.8CVSS9.7AI score0.02382EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.57 views

CVE-2019-1971

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the web p...

10CVSS9.1AI score0.01399EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.50 views

CVE-2019-1973

A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to improper input validation of log fi...

4.8CVSS5AI score0.0017EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.46 views

CVE-2019-1952

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files. The attacker would need valid administrator privilege-level credentials. This vulnerability is due to improper input validation of CL...

6.7CVSS6.4AI score0.00017EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.42 views

CVE-2019-1953

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging the admin password when a user is forced to modify the default password when logg...

6.5CVSS6.5AI score0.00212EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.42 views

CVE-2019-1959

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advi...

4.4CVSS4.7AI score0.00115EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.40 views

CVE-2019-1972

A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due t...

7.2CVSS6.8AI score0.0003EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.39 views

CVE-2019-1960

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advi...

4.4CVSS4.7AI score0.00115EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.36 views

CVE-2019-1946

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface. The vulnerability is due to an incorrect implementatio...

6.5CVSS6.7AI score0.00302EPSS
CVE
CVE
added 2019/08/08 8:15 a.m.35 views

CVE-2019-1961

A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages uploaded through the...

6.8CVSS5.1AI score0.00331EPSS