Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,231 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-0396	Cisco Systems, Inc. Unified Communications Manager Im And Presence Service	Med	0.40	6.1	0.02	Jul 18, 2018	A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The…
CVE-2018-0390	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.01	Jul 18, 2018	A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0366	Cisco Systems, Inc. Web Security Appliance	Med	0.40	6.1	0.02	Jul 16, 2018	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0357	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0356	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0355	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against the user of the web UI of an affected system. The vulnerability is due to insufficient…
CVE-2018-0354	Cisco Systems, Inc. Unity Connection	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of…
CVE-2018-0339	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input…
CVE-2018-0328	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is…
CVE-2018-0327	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2018-0326	Cisco Systems, Inc. Telepresence Server Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for…
CVE-2018-0289	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An…
CVE-2018-0276	Cisco Systems, Inc. WebEx Connect IM	Med	0.40	6.1	0.01	Apr 19, 2018	A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web…
CVE-2018-0251	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.40	6.1	0.02	Apr 19, 2018	A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0242	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.40	6.1	0.02	Apr 19, 2018	A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0190	Cisco Systems, Inc. iOS Xr Software	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0188	Cisco Systems, Inc. iOS Xr Software	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0186	Cisco Systems, Inc. iOS Xr Software	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0223	Cisco Systems, Inc. Security Manager	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-0219	Cisco Systems, Inc. Ucs Director	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0212	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0144	Cisco Systems, Inc. Prime Data Center Network Manager	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0206	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0205	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this…
CVE-2018-0199	Cisco Systems, Inc. Jabber Client Framework	Med	0.40	6.1	0.02	Feb 22, 2018	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page.…
CVE-2018-0145	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2018-0129	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 8, 2018	A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0128	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 8, 2018	A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0098	Cisco Systems, Inc. WAP150	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2018-0097	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An…
CVE-2018-0093	Cisco Systems, Inc. Web Security Appliance \(wsa\)	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0091	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-12308	Cisco Systems, Inc. 500 Series Stackable Managed Switches	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient…
CVE-2017-12307	Cisco Systems, Inc. Small Business 300 Series Managed Switches	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0118	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Jan 11, 2018	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12366	Cisco Systems, Inc. Webex Meeting Center	Med	0.40	6.1	0.01	Nov 30, 2017	A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12356	Cisco Systems, Inc. Jabber	Med	0.40	6.1	0.01	Nov 30, 2017	A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12347	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12346	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12344	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12323	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12322	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12321	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12320	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12304	Cisco Systems, Inc. Cisco iOS	Med	0.40	6.1	0.01	Nov 16, 2017	A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface on an affected device. The…
CVE-2017-12292	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12291	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12290	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12283	Cisco Systems, Inc. Aironet 3800	Med	0.40	6.1	0.01	Nov 2, 2017	A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists…
CVE-2017-12282	Cisco Systems, Inc. Wireless Lan Controllers	Med	0.40	6.1	0.01	Nov 2, 2017	A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service…

CVE-2018-0396MedJul 18, 2018
Cisco Systems, Inc.
Unified Communications Manager Im And Presence Service
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The…
CVE-2018-0390MedJul 18, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0366MedJul 16, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0357MedJun 7, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0356MedJun 7, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0355MedJun 7, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against the user of the web UI of an affected system. The vulnerability is due to insufficient…
CVE-2018-0354MedJun 7, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of…
CVE-2018-0339MedJun 7, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input…
CVE-2018-0328MedMay 17, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is…
CVE-2018-0327MedMay 17, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2018-0326MedMay 17, 2018
Cisco Systems, Inc.
Telepresence Server Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for…
CVE-2018-0289MedMay 17, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An…
CVE-2018-0276MedApr 19, 2018
Cisco Systems, Inc.
WebEx Connect IM
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web…
CVE-2018-0251MedApr 19, 2018
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0242MedApr 19, 2018
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0190MedMar 28, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0188MedMar 28, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0186MedMar 28, 2018
Cisco Systems, Inc.
iOS Xr Software
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0223MedMar 8, 2018
Cisco Systems, Inc.
Security Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-0219MedMar 8, 2018
Cisco Systems, Inc.
Ucs Director
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0212MedMar 8, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0144MedMar 8, 2018
Cisco Systems, Inc.
Prime Data Center Network Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0206MedFeb 22, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0205MedFeb 22, 2018
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.40cvss 6.1epss 0.01
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this…
CVE-2018-0199MedFeb 22, 2018
Cisco Systems, Inc.
Jabber Client Framework
risk 0.40cvss 6.1epss 0.02
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page.…
CVE-2018-0145MedFeb 22, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2018-0129MedFeb 8, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0128MedFeb 8, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0098MedJan 18, 2018
Cisco Systems, Inc.
WAP150
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2018-0097MedJan 18, 2018
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An…
CVE-2018-0093MedJan 18, 2018
Cisco Systems, Inc.
Web Security Appliance \(wsa\)
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0091MedJan 18, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-12308MedJan 18, 2018
Cisco Systems, Inc.
500 Series Stackable Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient…
CVE-2017-12307MedJan 18, 2018
Cisco Systems, Inc.
Small Business 300 Series Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0118MedJan 11, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12366MedNov 30, 2017
Cisco Systems, Inc.
Webex Meeting Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12356MedNov 30, 2017
Cisco Systems, Inc.
Jabber
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12347MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12346MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12344MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12323MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12322MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12321MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12320MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12304MedNov 16, 2017
Cisco Systems, Inc.
Cisco iOS
risk 0.40cvss 6.1epss 0.01
A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface on an affected device. The…
CVE-2017-12292MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12291MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12290MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12283MedNov 2, 2017
Cisco Systems, Inc.
Aironet 3800
risk 0.40cvss 6.1epss 0.01
A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists…
CVE-2017-12282MedNov 2, 2017
Cisco Systems, Inc.
Wireless Lan Controllers
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service…

Page 57 of 145