Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,230 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-3178	Cisco Systems, Inc. Content Security Management Appliance	Med	0.40	6.1	0.01	May 6, 2020	Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of…
CVE-2020-3192	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.40	6.1	0.01	Mar 4, 2020	A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3159	Cisco Systems, Inc. Finesse	Med	0.40	6.1	0.01	Feb 19, 2020	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to…
CVE-2020-3156	Cisco Systems, Inc. Identity Services Engine Express	Med	0.40	6.1	0.01	Feb 19, 2020	A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface.…
CVE-2020-3136	Cisco Systems, Inc. Jabber Guest	Med	0.40	6.1	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because…
CVE-2020-3121	Cisco Systems, Inc. Small Business Smart and Managed Switches	Med	0.40	6.1	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient…
CVE-2019-16024	Cisco Systems, Inc. Crosswork Change Automation	Med	0.40	6.1	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability…
CVE-2019-16015	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2019-15278	Cisco Systems, Inc. Finesse	Med	0.40	6.1	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it…
CVE-2019-15994	Cisco Systems, Inc. Stealthwatch Enterprise	Med	0.40	6.1	0.01	Nov 26, 2019	A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is…
CVE-2019-15973	Cisco Systems, Inc. Industrial Network Director	Med	0.40	6.1	0.01	Nov 26, 2019	A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected application. The vulnerability is due to…
CVE-2019-12718	Cisco Systems, Inc. Small Business Smart and Managed Switches	Med	0.40	6.1	0.01	Oct 16, 2019	A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient…
CVE-2019-12705	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.40	6.1	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management…
CVE-2019-15259	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of…
CVE-2019-12716	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2019-12715	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2019-12713	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2019-12712	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2019-12707	Cisco Systems, Inc. Unified Communications	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is…
CVE-2019-12695	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2019-12631	Cisco Systems, Inc. Identity Services Engine Express	Med	0.40	6.1	0.01	Oct 2, 2019	A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2019-1975	Cisco Systems, Inc. HyperFlex Software	Med	0.40	6.1	0.01	Sep 18, 2019	A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could…
CVE-2019-12644	Cisco Systems, Inc. Identity Services Engine Express	Med	0.40	6.1	0.01	Sep 5, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1954	Cisco Systems, Inc. Webex Meetings Server Software	Med	0.40	6.1	0.01	Aug 8, 2019	A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP…
CVE-2019-1941	Cisco Systems, Inc. Identity Services Engine Express	Med	0.40	6.1	0.01	Jul 17, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1931	Cisco Systems, Inc. Firepower Management Center	Med	0.40	6.1	0.01	Jul 6, 2019	Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of…
CVE-2019-1930	Cisco Systems, Inc. Firepower Management Center	Med	0.40	6.1	0.01	Jul 6, 2019	Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of…
CVE-2019-1870	Cisco Systems, Inc. Enterprise Chat And Email	Med	0.40	6.1	0.01	Jun 5, 2019	A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2015-2230	Cisco Systems, Inc. Collaboration Server	Med	0.40	6.1	0.01	May 30, 2019	Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.
CVE-2019-1857	Cisco Systems, Inc. HyperFlex HX-Series	Med	0.40	6.1	0.01	May 3, 2019	A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient…
CVE-2019-1856	Cisco Systems, Inc. Prime Collaboration Assurance	Med	0.40	6.1	0.01	May 3, 2019	A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1852	Cisco Systems, Inc. Prime Network Registrar	Med	0.40	6.1	0.01	May 3, 2019	A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of…
CVE-2019-1792	Cisco Systems, Inc. Umbrella	Med	0.40	6.1	0.01	Apr 18, 2019	A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella. The vulnerability is due to insufficient validation of input parameters…
CVE-2019-1719	Cisco Systems, Inc. Identity Services Engine Express	Med	0.40	6.1	0.01	Apr 18, 2019	A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2019-1827	Cisco Systems, Inc. Small Business RV320 Dual Gigabit WAN VPN Router	Med	0.40	6.1	0.01	Apr 4, 2019	A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists…
CVE-2019-1702	Cisco Systems, Inc. Enterprise Chat And Email	Med	0.40	6.1	0.01	Mar 11, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The…
CVE-2019-1700	Cisco Systems, Inc. Firepower 9000 Series	Med	0.40	6.1	0.01	Feb 21, 2019	A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2019-1685	Cisco Systems, Inc. Unity Connection	Med	0.40	6.1	0.01	Feb 21, 2019	A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The…
CVE-2019-1671	Cisco Systems, Inc. Firepower Management Center	Med	0.40	6.1	0.01	Feb 7, 2019	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The…
CVE-2019-1670	Cisco Systems, Inc. Unified Intelligence Center	Med	0.40	6.1	0.01	Feb 7, 2019	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due…
CVE-2019-1661	Cisco Systems, Inc. Telepresence Management Suite	Med	0.40	6.1	0.01	Feb 7, 2019	A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.…
CVE-2019-1668	Cisco Systems, Inc. Socialminer	Med	0.40	6.1	0.01	Jan 24, 2019	A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient…
CVE-2019-1655	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Jan 24, 2019	A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to…
CVE-2019-1643	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jan 23, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2018-15455	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jan 23, 2019	A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging database. An…
CVE-2018-15463	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jan 15, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-15440	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jan 15, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due…
CVE-2018-15467	Cisco Systems, Inc. Telepresence Management Suite	Med	0.40	6.1	0.01	Jan 11, 2019	A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-15461	Cisco Systems, Inc. Webex Business Suite	Med	0.40	6.1	0.01	Jan 10, 2019	A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this…
CVE-2018-15457	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jan 10, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…

CVE-2020-3178MedMay 6, 2020
Cisco Systems, Inc.
Content Security Management Appliance
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of…
CVE-2020-3192MedMar 4, 2020
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3159MedFeb 19, 2020
Cisco Systems, Inc.
Finesse
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to…
CVE-2020-3156MedFeb 19, 2020
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface.…
CVE-2020-3136MedJan 26, 2020
Cisco Systems, Inc.
Jabber Guest
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because…
CVE-2020-3121MedJan 26, 2020
Cisco Systems, Inc.
Small Business Smart and Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient…
CVE-2019-16024MedJan 26, 2020
Cisco Systems, Inc.
Crosswork Change Automation
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability…
CVE-2019-16015MedJan 26, 2020
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2019-15278MedJan 26, 2020
Cisco Systems, Inc.
Finesse
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it…
CVE-2019-15994MedNov 26, 2019
Cisco Systems, Inc.
Stealthwatch Enterprise
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is…
CVE-2019-15973MedNov 26, 2019
Cisco Systems, Inc.
Industrial Network Director
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected application. The vulnerability is due to…
CVE-2019-12718MedOct 16, 2019
Cisco Systems, Inc.
Small Business Smart and Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient…
CVE-2019-12705MedOct 16, 2019
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management…
CVE-2019-15259MedOct 2, 2019
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of…
CVE-2019-12716MedOct 2, 2019
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2019-12715MedOct 2, 2019
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the…
CVE-2019-12713MedOct 2, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2019-12712MedOct 2, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2019-12707MedOct 2, 2019
Cisco Systems, Inc.
Unified Communications
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is…
CVE-2019-12695MedOct 2, 2019
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2019-12631MedOct 2, 2019
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2019-1975MedSep 18, 2019
Cisco Systems, Inc.
HyperFlex Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could…
CVE-2019-12644MedSep 5, 2019
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1954MedAug 8, 2019
Cisco Systems, Inc.
Webex Meetings Server Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP…
CVE-2019-1941MedJul 17, 2019
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1931MedJul 6, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of…
CVE-2019-1930MedJul 6, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of…
CVE-2019-1870MedJun 5, 2019
Cisco Systems, Inc.
Enterprise Chat And Email
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email (ECE) Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2015-2230MedMay 30, 2019
Cisco Systems, Inc.
Collaboration Server
risk 0.40cvss 6.1epss 0.01
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.
CVE-2019-1857MedMay 3, 2019
Cisco Systems, Inc.
HyperFlex HX-Series
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient…
CVE-2019-1856MedMay 3, 2019
Cisco Systems, Inc.
Prime Collaboration Assurance
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2019-1852MedMay 3, 2019
Cisco Systems, Inc.
Prime Network Registrar
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of…
CVE-2019-1792MedApr 18, 2019
Cisco Systems, Inc.
Umbrella
risk 0.40cvss 6.1epss 0.01
A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella. The vulnerability is due to insufficient validation of input parameters…
CVE-2019-1719MedApr 18, 2019
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2019-1827MedApr 4, 2019
Cisco Systems, Inc.
Small Business RV320 Dual Gigabit WAN VPN Router
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists…
CVE-2019-1702MedMar 11, 2019
Cisco Systems, Inc.
Enterprise Chat And Email
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The…
CVE-2019-1700MedFeb 21, 2019
Cisco Systems, Inc.
Firepower 9000 Series
risk 0.40cvss 6.1epss 0.01
A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2019-1685MedFeb 21, 2019
Cisco Systems, Inc.
Unity Connection
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The…
CVE-2019-1671MedFeb 7, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The…
CVE-2019-1670MedFeb 7, 2019
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due…
CVE-2019-1661MedFeb 7, 2019
Cisco Systems, Inc.
Telepresence Management Suite
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.…
CVE-2019-1668MedJan 24, 2019
Cisco Systems, Inc.
Socialminer
risk 0.40cvss 6.1epss 0.01
A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected system. This vulnerability is due to insufficient…
CVE-2019-1655MedJan 24, 2019
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to…
CVE-2019-1643MedJan 23, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is…
CVE-2018-15455MedJan 23, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of requests stored in the system's logging database. An…
CVE-2018-15463MedJan 15, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-15440MedJan 15, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due…
CVE-2018-15467MedJan 11, 2019
Cisco Systems, Inc.
Telepresence Management Suite
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-15461MedJan 10, 2019
Cisco Systems, Inc.
Webex Business Suite
risk 0.40cvss 6.1epss 0.01
A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this…
CVE-2018-15457MedJan 10, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…

Page 60 of 145