Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-0091	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-12308	Cisco Systems, Inc. 500 Series Stackable Managed Switches	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient…
CVE-2017-12307	Cisco Systems, Inc. Small Business 300 Series Managed Switches	Med	0.40	6.1	0.01	Jan 18, 2018	A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0118	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Jan 11, 2018	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12366	Cisco Systems, Inc. Webex Meeting Center	Med	0.40	6.1	0.01	Nov 30, 2017	A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12356	Cisco Systems, Inc. Jabber	Med	0.40	6.1	0.01	Nov 30, 2017	A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12347	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12346	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12344	Cisco Systems, Inc. Data Center Network Manager	Med	0.40	6.1	0.01	Nov 30, 2017	Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12323	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12322	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12321	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12320	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12304	Cisco Systems, Inc. Cisco iOS	Med	0.40	6.1	0.01	Nov 16, 2017	A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface on an affected device. The…
CVE-2017-12292	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12291	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12290	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Nov 16, 2017	Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12283	Cisco Systems, Inc. Aironet 3800	Med	0.40	6.1	0.01	Nov 2, 2017	A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists…
CVE-2017-12282	Cisco Systems, Inc. Wireless Lan Controllers	Med	0.40	6.1	0.01	Nov 2, 2017	A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service…
CVE-2017-12298	Cisco Systems, Inc. Webex Meeting Center	Med	0.40	6.1	0.01	Oct 19, 2017	A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12296	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Oct 19, 2017	A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to…
CVE-2017-12288	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Oct 19, 2017	A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to insufficient validation…
CVE-2017-12272	Cisco Systems, Inc. iOS Xe	Med	0.40	6.1	0.01	Oct 19, 2017	A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input…
CVE-2017-12265	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.40	6.1	0.01	Oct 5, 2017	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device,…
CVE-2017-12258	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Oct 5, 2017	A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML…
CVE-2017-12257	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Oct 5, 2017	A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation…
CVE-2017-12254	Cisco Systems, Inc. Unified Intelligence Center	Med	0.40	6.1	0.02	Sep 21, 2017	A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters…
CVE-2017-12248	Cisco Systems, Inc. Unified Intelligence Center	Med	0.40	6.1	0.02	Sep 21, 2017	A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2017-6789	Cisco Systems, Inc. Unified Intelligence Center	Med	0.40	6.1	0.01	Sep 7, 2017	A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)-based, environment or client-side cross-site scripting (XSS) attack. The…
CVE-2017-12220	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.40	6.1	0.01	Sep 7, 2017	A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12212	Cisco Systems, Inc. Unity Connection	Med	0.40	6.1	0.01	Sep 7, 2017	A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2017-6788	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Med	0.40	6.1	0.01	Aug 17, 2017	The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected software. The vulnerability is due to…
CVE-2017-6776	Cisco Systems, Inc. Elastic Services Controller	Med	0.40	6.1	0.01	Aug 17, 2017	A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. The vulnerability is due to insufficient validation of…
CVE-2017-6765	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.40	6.1	0.02	Aug 7, 2017	A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-6762	Cisco Systems, Inc. Jabber Guest	Med	0.40	6.1	0.01	Aug 7, 2017	A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected…
CVE-2017-6761	Cisco Systems, Inc. Finesse	Med	0.40	6.1	0.01	Aug 7, 2017	A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability…
CVE-2017-6755	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.40	6.1	0.01	Jul 25, 2017	A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc90312.…
CVE-2015-0674	Cisco Systems, Inc. Cloud Web Security	Med	0.40	6.1	0.01	Jul 25, 2017	Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2017-6733	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jul 10, 2017	A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More…
CVE-2017-6725	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known…
CVE-2017-6724	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected…
CVE-2017-6722	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information:…
CVE-2017-6702	Cisco Systems, Inc. Socialminer	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1).
CVE-2017-6701	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information:…
CVE-2017-6700	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site…
CVE-2017-6699	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Jul 4, 2017	A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based…
CVE-2017-6675	Cisco Systems, Inc. Industrial Network Director	Med	0.40	6.1	0.01	Jun 13, 2017	A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176).
CVE-2017-6670	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.40	6.1	0.01	Jun 13, 2017	A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.
CVE-2017-6661	Cisco Systems, Inc. Content Security Management Appliance	Med	0.40	6.1	0.01	Jun 13, 2017	A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2017-6654	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	May 22, 2017	A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…

CVE-2018-0091MedJan 18, 2018
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-12308MedJan 18, 2018
Cisco Systems, Inc.
500 Series Stackable Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient…
CVE-2017-12307MedJan 18, 2018
Cisco Systems, Inc.
Small Business 300 Series Managed Switches
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2018-0118MedJan 11, 2018
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12366MedNov 30, 2017
Cisco Systems, Inc.
Webex Meeting Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12356MedNov 30, 2017
Cisco Systems, Inc.
Jabber
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12347MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12346MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12344MedNov 30, 2017
Cisco Systems, Inc.
Data Center Network Manager
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a…
CVE-2017-12323MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12322MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12321MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12320MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12304MedNov 16, 2017
Cisco Systems, Inc.
Cisco iOS
risk 0.40cvss 6.1epss 0.01
A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface on an affected device. The…
CVE-2017-12292MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12291MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12290MedNov 16, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The…
CVE-2017-12283MedNov 2, 2017
Cisco Systems, Inc.
Aironet 3800
risk 0.40cvss 6.1epss 0.01
A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists…
CVE-2017-12282MedNov 2, 2017
Cisco Systems, Inc.
Wireless Lan Controllers
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2 RF-adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service…
CVE-2017-12298MedOct 19, 2017
Cisco Systems, Inc.
Webex Meeting Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the…
CVE-2017-12296MedOct 19, 2017
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to…
CVE-2017-12288MedOct 19, 2017
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected device. The vulnerability is due to insufficient validation…
CVE-2017-12272MedOct 19, 2017
Cisco Systems, Inc.
iOS Xe
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input…
CVE-2017-12265MedOct 5, 2017
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device,…
CVE-2017-12258MedOct 5, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML…
CVE-2017-12257MedOct 5, 2017
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation…
CVE-2017-12254MedSep 21, 2017
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters…
CVE-2017-12248MedSep 21, 2017
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to…
CVE-2017-6789MedSep 7, 2017
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model (DOM)-based, environment or client-side cross-site scripting (XSS) attack. The…
CVE-2017-12220MedSep 7, 2017
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The…
CVE-2017-12212MedSep 7, 2017
Cisco Systems, Inc.
Unity Connection
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input…
CVE-2017-6788MedAug 17, 2017
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.40cvss 6.1epss 0.01
The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected software. The vulnerability is due to…
CVE-2017-6776MedAug 17, 2017
Cisco Systems, Inc.
Elastic Services Controller
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. The vulnerability is due to insufficient validation of…
CVE-2017-6765MedAug 7, 2017
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an…
CVE-2017-6762MedAug 7, 2017
Cisco Systems, Inc.
Jabber Guest
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected…
CVE-2017-6761MedAug 7, 2017
Cisco Systems, Inc.
Finesse
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability…
CVE-2017-6755MedJul 25, 2017
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc90312.…
CVE-2015-0674MedJul 25, 2017
Cisco Systems, Inc.
Cloud Web Security
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2017-6733MedJul 10, 2017
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More…
CVE-2017-6725MedJul 4, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known…
CVE-2017-6724MedJul 4, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected…
CVE-2017-6722MedJul 4, 2017
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information:…
CVE-2017-6702MedJul 4, 2017
Cisco Systems, Inc.
Socialminer
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1).
CVE-2017-6701MedJul 4, 2017
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information:…
CVE-2017-6700MedJul 4, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site…
CVE-2017-6699MedJul 4, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based…
CVE-2017-6675MedJun 13, 2017
Cisco Systems, Inc.
Industrial Network Director
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against an affected system. More Information: CSCvd25405. Known Affected Releases: 1.1(0.176).
CVE-2017-6670MedJun 13, 2017
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.
CVE-2017-6661MedJun 13, 2017
Cisco Systems, Inc.
Content Security Management Appliance
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVE-2017-6654MedMay 22, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…

Page 61 of 140