Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-15457	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jan 10, 2019	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2018-15435	Cisco Systems, Inc. Socialminer	Med	0.40	6.1	0.01	Oct 17, 2018	A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2018-15436	Cisco Systems, Inc. Webex Meeting Center	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-15434	Cisco Systems, Inc. Skinny Client Control Protocol Software	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-15406	Cisco Systems, Inc. Ucs Director	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2018-15400	Cisco Systems, Inc. Cloud Services Platform 2100	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0480	Cisco Systems, Inc. iOS Xe	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and…
CVE-2018-0465	Cisco Systems, Inc. Small Business 300 Series Managed Switches	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerability…
CVE-2018-0458	Cisco Systems, Inc. Prime Collaboration Assurance	Med	0.40	6.1	0.02	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0452	Cisco Systems, Inc. Tetration Analytics	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due…
CVE-2018-0450	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the management interface on an affected device. The vulnerability is due to…
CVE-2018-0444	Cisco Systems, Inc. Packaged Contact Center Enterprise	Med	0.40	6.1	0.00	Oct 5, 2018	A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied…
CVE-2018-17051	Cisco Systems, Inc. Cisco Configuration Manager	Med	0.40	6.1	0.01	Sep 14, 2018	K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.
CVE-2018-0386	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.40	6.1	0.02	Aug 15, 2018	A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulnerability is due to improper validation of input that is passed to the affected…
CVE-2018-0411	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Aug 1, 2018	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0406	Cisco Systems, Inc. Web Security Appliance	Med	0.40	6.1	0.02	Aug 1, 2018	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a user of the web-based…
CVE-2018-0401	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Jul 18, 2018	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.
CVE-2018-0400	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Jul 18, 2018	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.
CVE-2018-0396	Cisco Systems, Inc. Unified Communications Manager Im And Presence Service	Med	0.40	6.1	0.02	Jul 18, 2018	A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The…
CVE-2018-0390	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.01	Jul 18, 2018	A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0366	Cisco Systems, Inc. Web Security Appliance	Med	0.40	6.1	0.02	Jul 16, 2018	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0357	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0356	Cisco Systems, Inc. Webex	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0355	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against the user of the web UI of an affected system. The vulnerability is due to insufficient…
CVE-2018-0354	Cisco Systems, Inc. Unity Connection	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of…
CVE-2018-0339	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	Jun 7, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input…
CVE-2018-0328	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is…
CVE-2018-0327	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2018-0326	Cisco Systems, Inc. Telepresence Server Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for…
CVE-2018-0289	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	May 17, 2018	A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An…
CVE-2018-0276	Cisco Systems, Inc. Webex Connect Im	Med	0.40	6.1	0.01	Apr 19, 2018	A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web…
CVE-2018-0251	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.40	6.1	0.02	Apr 19, 2018	A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0242	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.40	6.1	0.02	Apr 19, 2018	A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0190	Cisco Systems, Inc. iOS Xe	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0188	Cisco Systems, Inc. iOS Xe	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0186	Cisco Systems, Inc. iOS Xe	Med	0.40	6.1	0.01	Mar 28, 2018	Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0223	Cisco Systems, Inc. Security Manager	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-0219	Cisco Systems, Inc. Unified Computing System Director	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0212	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0144	Cisco Systems, Inc. Prime Data Center Network Manager	Med	0.40	6.1	0.02	Mar 8, 2018	A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0206	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0205	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this…
CVE-2018-0200	Cisco Systems, Inc. Prime Service Catalog	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface of an affected product. The vulnerability is due to…
CVE-2018-0199	Cisco Systems, Inc. Jabber	Med	0.40	6.1	0.02	Feb 22, 2018	A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page.…
CVE-2018-0145	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 22, 2018	A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2018-0129	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 8, 2018	A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0128	Cisco Systems, Inc. Data Center Analytics Framework	Med	0.40	6.1	0.01	Feb 8, 2018	A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0098	Cisco Systems, Inc. WAP150	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2018-0097	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An…
CVE-2018-0093	Cisco Systems, Inc. Web Security Appliance	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…

CVE-2018-15457MedJan 10, 2019
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2018-15435MedOct 17, 2018
Cisco Systems, Inc.
Socialminer
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient…
CVE-2018-15436MedOct 5, 2018
Cisco Systems, Inc.
Webex Meeting Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-15434MedOct 5, 2018
Cisco Systems, Inc.
Skinny Client Control Protocol Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Unified IP Phone 7900 Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-15406MedOct 5, 2018
Cisco Systems, Inc.
Ucs Director
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due…
CVE-2018-15400MedOct 5, 2018
Cisco Systems, Inc.
Cloud Services Platform 2100
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0480MedOct 5, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.40cvss 6.1epss 0.01
A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and…
CVE-2018-0465MedOct 5, 2018
Cisco Systems, Inc.
Small Business 300 Series Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerability…
CVE-2018-0458MedOct 5, 2018
Cisco Systems, Inc.
Prime Collaboration Assurance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0452MedOct 5, 2018
Cisco Systems, Inc.
Tetration Analytics
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due…
CVE-2018-0450MedOct 5, 2018
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the management interface on an affected device. The vulnerability is due to…
CVE-2018-0444MedOct 5, 2018
Cisco Systems, Inc.
Packaged Contact Center Enterprise
risk 0.40cvss 6.1epss 0.00
A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a stored XSS attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied…
CVE-2018-17051MedSep 14, 2018
Cisco Systems, Inc.
Cisco Configuration Manager
risk 0.40cvss 6.1epss 0.01
K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.
CVE-2018-0386MedAug 15, 2018
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulnerability is due to improper validation of input that is passed to the affected…
CVE-2018-0411MedAug 1, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0406MedAug 1, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based (DOM-based) cross-site scripting (XSS) attack against a user of the web-based…
CVE-2018-0401MedJul 18, 2018
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.
CVE-2018-0400MedJul 18, 2018
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.
CVE-2018-0396MedJul 18, 2018
Cisco Systems, Inc.
Unified Communications Manager Im And Presence Service
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The…
CVE-2018-0390MedJul 18, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0366MedJul 16, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0357MedJun 7, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0356MedJun 7, 2018
Cisco Systems, Inc.
Webex
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain…
CVE-2018-0355MedJun 7, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against the user of the web UI of an affected system. The vulnerability is due to insufficient…
CVE-2018-0354MedJun 7, 2018
Cisco Systems, Inc.
Unity Connection
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of…
CVE-2018-0339MedJun 7, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input…
CVE-2018-0328MedMay 17, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is…
CVE-2018-0327MedMay 17, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2018-0326MedMay 17, 2018
Cisco Systems, Inc.
Telepresence Server Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for…
CVE-2018-0289MedMay 17, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An…
CVE-2018-0276MedApr 19, 2018
Cisco Systems, Inc.
Webex Connect Im
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web…
CVE-2018-0251MedApr 19, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2018-0242MedApr 19, 2018
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0190MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0188MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0186MedMar 28, 2018
Cisco Systems, Inc.
iOS Xe
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to…
CVE-2018-0223MedMar 8, 2018
Cisco Systems, Inc.
Security Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to…
CVE-2018-0219MedMar 8, 2018
Cisco Systems, Inc.
Unified Computing System Director
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0212MedMar 8, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0144MedMar 8, 2018
Cisco Systems, Inc.
Prime Data Center Network Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0206MedFeb 22, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0205MedFeb 22, 2018
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.40cvss 6.1epss 0.01
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this…
CVE-2018-0200MedFeb 22, 2018
Cisco Systems, Inc.
Prime Service Catalog
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface of an affected product. The vulnerability is due to…
CVE-2018-0199MedFeb 22, 2018
Cisco Systems, Inc.
Jabber
risk 0.40cvss 6.1epss 0.02
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page.…
CVE-2018-0145MedFeb 22, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of the Cisco Data Center Analytics Framework application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2018-0129MedFeb 8, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0128MedFeb 8, 2018
Cisco Systems, Inc.
Data Center Analytics Framework
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2018-0098MedJan 18, 2018
Cisco Systems, Inc.
WAP150
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet (PoE) and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2018-0097MedJan 18, 2018
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect. The vulnerability is due to improper input validation of the parameters in the HTTP request. An…
CVE-2018-0093MedJan 18, 2018
Cisco Systems, Inc.
Web Security Appliance
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…

Page 60 of 140