CVE-2017-12323

The CVE-2017-12323 set concerns the Cisco Registered Envelope Service web interface. The connected documents confirm there are multiple XSS and redirect vulnerabilities in the service’s web UI due to insufficient validation of user-supplied input. Affected component: Cisco Registered Envelope Ser...

CVE-2017-12321

The CVE-2017-12321 set concerns Cisco Registered Envelope Service, specifically its web interface. The reported flaws are cross-site scripting (XSS) vulnerabilities caused by insufficient validation of user-supplied input in the web-based management interface. An unauthenticated, remote attacker ...

CVE-2018-15448

Cisco Registered Envelope Service suffers an information-disclosure vulnerability where an insecure configuration enables improper indexing, allowing unauthenticated, remote attackers to discover sensitive user data (e.g., usernames) via search engines. The root cause is misconfiguring indexing o...

CVE-2017-12320

Cisco Registered Envelope Service (web interface) contains multiple XSS vulnerabilities due to insufficient input validation. An unauthenticated, remote attacker could entice a user to click a crafted link or send a request to execute arbitrary script in the user’s browser or access browser-based...