CVE-2019-15994

Cisco Stealthwatch Enterprise Web UI contains an XSS vulnerability (CVE-2019-15994) due to insufficient input validation in the web-based management interface. An unauthenticated, remote attacker could entice a user to click a crafted link, enabling arbitrary script execution in the user’s browse...

CVE-2018-15394

CVE-2018-15394 affects Cisco Stealthwatch Enterprise’s Stealthwatch Management Console (SMC). A vulnerability in the SMC’s insecure configuration allows an unauthenticated, remote attacker to bypass authentication and perform actions with administrative privileges by sending a crafted HTTP reques...