VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,133 total · sorted by risk
  • CVE-2017-3833MedFeb 22, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected…

  • CVE-2017-3829MedFeb 22, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…

  • CVE-2017-3828MedFeb 22, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…

  • CVE-2017-3821MedFeb 22, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvc49348. Known Affected Releases: 10.5(2.14076.1). Known Fixed…

  • CVE-2017-3804MedJan 26, 2017
    Cisco Systems, Inc.
    Nx OS
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath…

  • CVE-2017-3802MedJan 26, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases:…

  • CVE-2017-3798MedJan 26, 2017
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.01

    A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known…

  • CVE-2016-9222MedJan 26, 2017
    Cisco Systems, Inc.
    Netflow Generation Appliance Software
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…

  • CVE-2016-9214MedDec 14, 2016
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.40cvss 6.1epss 0.02

    Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected…

  • CVE-2016-9206MedDec 14, 2016
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvb64641. Known Affected Releases: 11.5(1.10000.6) 11.5(1.11007.2).…

  • CVE-2016-9202MedDec 14, 2016
    Cisco Systems, Inc.
    Email Security Appliance Firmware
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More…

  • CVE-2016-9200MedDec 14, 2016
    Cisco Systems, Inc.
    Prime Collaboration Assurance
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1)…

  • CVE-2016-6472MedNov 19, 2016
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker to launch a cross-site scripting (XSS) attack against a user of the web interface on the affected system. More…

  • CVE-2016-6451MedNov 3, 2016
    Cisco Systems, Inc.
    Prime Collaboration Provisioning
    risk 0.40cvss 6.1epss 0.01

    Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information:…

  • CVE-2016-6429MedNov 3, 2016
    Cisco Systems, Inc.
    IP Interoperability And Collaboration System
    risk 0.40cvss 6.1epss 0.01

    A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1).

  • CVE-2016-1423MedOct 28, 2016
    Cisco Systems, Inc.
    Asyncos
    risk 0.40cvss 6.1epss 0.02

    A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could…

  • CVE-2016-6436MedOct 6, 2016
    Cisco Systems, Inc.
    Hostscan Engine
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.

  • CVE-2016-6425MedOct 6, 2016
    Cisco Systems, Inc.
    Unified Intelligence Center
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020…

  • CVE-2016-6418MedOct 5, 2016
    Cisco Systems, Inc.
    Videoscape Distribution Suite Service Manager
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.

  • CVE-2016-6404MedSep 18, 2016
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.

  • CVE-2016-1471MedSep 2, 2016
    Cisco Systems, Inc.
    Small Business 220
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.

  • CVE-2016-6365MedAug 23, 2016
    Cisco Systems, Inc.
    Secure Firewall Management Center
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518.

  • CVE-2016-6359MedAug 22, 2016
    Cisco Systems, Inc.
    Transport Gateway Installation Software
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817.

  • CVE-2016-1485MedAug 22, 2016
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.

  • CVE-2016-1462MedJul 28, 2016
    Cisco Systems, Inc.
    Prime Service Catalog
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.

  • CVE-2016-1451MedJul 15, 2016
    Cisco Systems, Inc.
    Meeting Server
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922.

  • CVE-2016-1449MedJul 15, 2016
    Cisco Systems, Inc.
    Webex Meetings Server
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711.

  • CVE-2016-1447MedJul 15, 2016
    Cisco Systems, Inc.
    Webex Meetings Server
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.

  • CVE-2016-1439MedJun 23, 2016
    Cisco Systems, Inc.
    Unified Contact Center Enterprise
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.

  • CVE-2016-1396MedJun 19, 2016
    Cisco Systems, Inc.
    Rv110w
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web…

  • CVE-2016-1431MedJun 18, 2016
    Cisco Systems, Inc.
    Secure Firewall Management Center
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516.

  • CVE-2016-1401MedMay 21, 2016
    Cisco Systems, Inc.
    Unified Computing System Central Software
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.

  • CVE-2016-1377MedApr 12, 2016
    Cisco Systems, Inc.
    Unity Connection
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.

  • CVE-2016-1375MedApr 8, 2016
    Cisco Systems, Inc.
    IP Interoperability And Collaboration System
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339.

  • CVE-2016-1314MedMar 28, 2016
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760.

  • CVE-2016-1355MedMar 3, 2016
    Cisco Systems, Inc.
    Firesight System Software
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687.

  • CVE-2016-1354MedMar 3, 2016
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.

  • CVE-2016-1331MedFeb 15, 2016
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy10766.

  • CVE-2016-1318MedFeb 9, 2016
    Cisco Systems, Inc.
    Application Policy Infrastructure Controller Enterprise Module
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489.

  • CVE-2016-1309MedFeb 7, 2016
    Cisco Systems, Inc.
    Webex Meetings Server
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843.

  • CVE-2016-1305MedFeb 7, 2016
    Cisco Systems, Inc.
    Application Policy Infrastructure Controller Enterprise Module
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511.

  • CVE-2016-1311MedFeb 6, 2016
    Cisco Systems, Inc.
    Jabber Guest
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224.

  • CVE-2016-1310MedFeb 6, 2016
    Cisco Systems, Inc.
    Unity Connection
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033.

  • CVE-2016-1306MedFeb 6, 2016
    Cisco Systems, Inc.
    Fog Director
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466.

  • CVE-2016-1304MedJan 30, 2016
    Cisco Systems, Inc.
    Unity Connection
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596.

  • CVE-2016-1300MedJan 27, 2016
    Cisco Systems, Inc.
    Unity Connection
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582.

  • CVE-2016-1298MedJan 26, 2016
    Cisco Systems, Inc.
    Unified Contact Center Express
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033.

  • CVE-2015-6337MedJan 26, 2016
    Cisco Systems, Inc.
    Application Policy Infrastructure Controller Enterprise Module
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238.

  • CVE-2016-1294MedJan 16, 2016
    Cisco Systems, Inc.
    Firesight System Software
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094.

  • CVE-2016-1293MedJan 16, 2016
    Cisco Systems, Inc.
    Firesight System Software
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414.

Page 62 of 143