Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-6611	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Apr 20, 2017	A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient…
CVE-2017-6604	Cisco Systems, Inc. Unified Computing System	Med	0.40	6.1	0.01	Apr 7, 2017	A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified…
CVE-2017-3889	Cisco Systems, Inc. Registered Envelope Service	Med	0.40	6.1	0.01	Apr 7, 2017	A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More…
CVE-2017-3848	Cisco Systems, Inc. Prime Infrastructure	Med	0.40	6.1	0.01	Apr 7, 2017	A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001…
CVE-2017-3872	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Mar 17, 2017	A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known…
CVE-2017-3868	Cisco Systems, Inc. Unified Computing System Director	Med	0.40	6.1	0.01	Mar 17, 2017	A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344.…
CVE-2017-3866	Cisco Systems, Inc. Prime Service Catalog	Med	0.40	6.1	0.01	Mar 17, 2017	A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846…
CVE-2017-3845	Cisco Systems, Inc. Prime Collaboration Assurance	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected…
CVE-2017-3840	Cisco Systems, Inc. Secure Access Control System	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5).
CVE-2017-3838	Cisco Systems, Inc. Secure Access Control System	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected…
CVE-2017-3833	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Feb 22, 2017	A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected…
CVE-2017-3829	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2017-3828	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2017-3821	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Feb 22, 2017	A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvc49348. Known Affected Releases: 10.5(2.14076.1). Known Fixed…
CVE-2017-3804	Cisco Systems, Inc. Nx OS	Med	0.40	6.1	0.01	Jan 26, 2017	A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath…
CVE-2017-3802	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Jan 26, 2017	A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases:…
CVE-2017-3798	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.01	Jan 26, 2017	A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known…
CVE-2016-9222	Cisco Systems, Inc. Netflow Generation Appliance Software	Med	0.40	6.1	0.01	Jan 26, 2017	A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2016-9214	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.02	Dec 14, 2016	Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected…
CVE-2016-9206	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Dec 14, 2016	A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvb64641. Known Affected Releases: 11.5(1.10000.6) 11.5(1.11007.2).…
CVE-2016-9202	Cisco Systems, Inc. Email Security Appliance Firmware	Med	0.40	6.1	0.01	Dec 14, 2016	A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More…
CVE-2016-9200	Cisco Systems, Inc. Prime Collaboration Assurance	Med	0.40	6.1	0.02	Dec 14, 2016	A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1)…
CVE-2016-6472	Cisco Systems, Inc. Unified Communications Manager	Med	0.40	6.1	0.02	Nov 19, 2016	A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker to launch a cross-site scripting (XSS) attack against a user of the web interface on the affected system. More…
CVE-2016-6451	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.40	6.1	0.01	Nov 3, 2016	Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information:…
CVE-2016-6429	Cisco Systems, Inc. IP Interoperability And Collaboration System	Med	0.40	6.1	0.01	Nov 3, 2016	A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1).
CVE-2016-1423	Cisco Systems, Inc. Asyncos	Med	0.40	6.1	0.02	Oct 28, 2016	A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could…
CVE-2016-6436	Cisco Systems, Inc. Hostscan Engine	Med	0.40	6.1	0.01	Oct 6, 2016	Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.
CVE-2016-6425	Cisco Systems, Inc. Unified Contact Center Express	Med	0.40	6.1	0.01	Oct 6, 2016	Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020…
CVE-2016-6418	Cisco Systems, Inc. Videoscape Distribution Suite Service Manager	Med	0.40	6.1	0.01	Oct 5, 2016	Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.
CVE-2016-6404	Cisco Systems, Inc. Cisco iOS	Med	0.40	6.1	0.01	Sep 18, 2016	Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.
CVE-2016-1471	Cisco Systems, Inc. Small Business 220	Med	0.40	6.1	0.01	Sep 2, 2016	Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.
CVE-2016-6365	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.40	6.1	0.01	Aug 23, 2016	Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518.
CVE-2016-6359	Cisco Systems, Inc. Transport Gateway Installation Software	Med	0.40	6.1	0.01	Aug 22, 2016	Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817.
CVE-2016-1485	Cisco Systems, Inc. Identity Services Engine Software	Med	0.40	6.1	0.01	Aug 22, 2016	Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.
CVE-2016-1462	Cisco Systems, Inc. Prime Service Catalog	Med	0.40	6.1	0.01	Jul 28, 2016	Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.
CVE-2016-1451	Cisco Systems, Inc. Meeting Server	Med	0.40	6.1	0.01	Jul 15, 2016	Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922.
CVE-2016-1449	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Jul 15, 2016	Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711.
CVE-2016-1447	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Jul 15, 2016	Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.
CVE-2016-1439	Cisco Systems, Inc. Unified Contact Center Enterprise	Med	0.40	6.1	0.01	Jun 23, 2016	Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.
CVE-2016-1396	Cisco Systems, Inc. Rv110w	Med	0.40	6.1	0.01	Jun 19, 2016	Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web…
CVE-2016-1431	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.40	6.1	0.01	Jun 18, 2016	Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516.
CVE-2016-1401	Cisco Systems, Inc. Unified Computing System Central Software	Med	0.40	6.1	0.01	May 21, 2016	Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.
CVE-2016-1377	Cisco Systems, Inc. Unity Connection	Med	0.40	6.1	0.01	Apr 12, 2016	Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.
CVE-2016-1375	Cisco Systems, Inc. IP Interoperability And Collaboration System	Med	0.40	6.1	0.01	Apr 8, 2016	Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339.
CVE-2016-1314	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.40	6.1	0.01	Mar 28, 2016	Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760.
CVE-2016-1355	Cisco Systems, Inc. Firesight System Software	Med	0.40	6.1	0.01	Mar 3, 2016	Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687.
CVE-2016-1354	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.40	6.1	0.01	Mar 3, 2016	Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.
CVE-2016-1331	Cisco Systems, Inc. Emergency Responder	Med	0.40	6.1	0.01	Feb 15, 2016	Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy10766.
CVE-2016-1318	Cisco Systems, Inc. Application Policy Infrastructure Controller Enterprise Module	Med	0.40	6.1	0.01	Feb 9, 2016	Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489.
CVE-2016-1309	Cisco Systems, Inc. Webex Meetings Server	Med	0.40	6.1	0.01	Feb 7, 2016	Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843.

CVE-2017-6611MedApr 20, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient…
CVE-2017-6604MedApr 7, 2017
Cisco Systems, Inc.
Unified Computing System
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified…
CVE-2017-3889MedApr 7, 2017
Cisco Systems, Inc.
Registered Envelope Service
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This vulnerability affects the Cisco Registered Envelope cloud-based service. More…
CVE-2017-3848MedApr 7, 2017
Cisco Systems, Inc.
Prime Infrastructure
risk 0.40cvss 6.1epss 0.01
A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001…
CVE-2017-3872MedMar 17, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known…
CVE-2017-3868MedMar 17, 2017
Cisco Systems, Inc.
Unified Computing System Director
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344.…
CVE-2017-3866MedMar 17, 2017
Cisco Systems, Inc.
Prime Service Catalog
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846…
CVE-2017-3845MedFeb 22, 2017
Cisco Systems, Inc.
Prime Collaboration Assurance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected…
CVE-2017-3840MedFeb 22, 2017
Cisco Systems, Inc.
Secure Access Control System
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5).
CVE-2017-3838MedFeb 22, 2017
Cisco Systems, Inc.
Secure Access Control System
risk 0.40cvss 6.1epss 0.02
A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected…
CVE-2017-3833MedFeb 22, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected…
CVE-2017-3829MedFeb 22, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2017-3828MedFeb 22, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2017-3821MedFeb 22, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvc49348. Known Affected Releases: 10.5(2.14076.1). Known Fixed…
CVE-2017-3804MedJan 26, 2017
Cisco Systems, Inc.
Nx OS
risk 0.40cvss 6.1epss 0.01
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath…
CVE-2017-3802MedJan 26, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases:…
CVE-2017-3798MedJan 26, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known…
CVE-2016-9222MedJan 26, 2017
Cisco Systems, Inc.
Netflow Generation Appliance Software
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More…
CVE-2016-9214MedDec 14, 2016
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.02
Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvb86332 CSCvb86760. Known Affected…
CVE-2016-9206MedDec 14, 2016
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvb64641. Known Affected Releases: 11.5(1.10000.6) 11.5(1.11007.2).…
CVE-2016-9202MedDec 14, 2016
Cisco Systems, Inc.
Email Security Appliance Firmware
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the affected interface on an affected device. More…
CVE-2016-9200MedDec 14, 2016
Cisco Systems, Inc.
Prime Collaboration Assurance
risk 0.40cvss 6.1epss 0.02
A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1)…
CVE-2016-6472MedNov 19, 2016
Cisco Systems, Inc.
Unified Communications Manager
risk 0.40cvss 6.1epss 0.02
A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker to launch a cross-site scripting (XSS) attack against a user of the web interface on the affected system. More…
CVE-2016-6451MedNov 3, 2016
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.40cvss 6.1epss 0.01
Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information:…
CVE-2016-6429MedNov 3, 2016
Cisco Systems, Inc.
IP Interoperability And Collaboration System
risk 0.40cvss 6.1epss 0.01
A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1).
CVE-2016-1423MedOct 28, 2016
Cisco Systems, Inc.
Asyncos
risk 0.40cvss 6.1epss 0.02
A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could…
CVE-2016-6436MedOct 6, 2016
Cisco Systems, Inc.
Hostscan Engine
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682.
CVE-2016-6425MedOct 6, 2016
Cisco Systems, Inc.
Unified Contact Center Express
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020…
CVE-2016-6418MedOct 5, 2016
Cisco Systems, Inc.
Videoscape Distribution Suite Service Manager
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.
CVE-2016-6404MedSep 18, 2016
Cisco Systems, Inc.
Cisco iOS
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.
CVE-2016-1471MedSep 2, 2016
Cisco Systems, Inc.
Small Business 220
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.
CVE-2016-6365MedAug 23, 2016
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518.
CVE-2016-6359MedAug 22, 2016
Cisco Systems, Inc.
Transport Gateway Installation Software
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817.
CVE-2016-1485MedAug 22, 2016
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.
CVE-2016-1462MedJul 28, 2016
Cisco Systems, Inc.
Prime Service Catalog
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.
CVE-2016-1451MedJul 15, 2016
Cisco Systems, Inc.
Meeting Server
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922.
CVE-2016-1449MedJul 15, 2016
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy92711.
CVE-2016-1447MedJul 15, 2016
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194.
CVE-2016-1439MedJun 23, 2016
Cisco Systems, Inc.
Unified Contact Center Enterprise
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650.
CVE-2016-1396MedJun 19, 2016
Cisco Systems, Inc.
Rv110w
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web…
CVE-2016-1431MedJun 18, 2016
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516.
CVE-2016-1401MedMay 21, 2016
Cisco Systems, Inc.
Unified Computing System Central Software
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250.
CVE-2016-1377MedApr 12, 2016
Cisco Systems, Inc.
Unity Connection
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.
CVE-2016-1375MedApr 8, 2016
Cisco Systems, Inc.
IP Interoperability And Collaboration System
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339.
CVE-2016-1314MedMar 28, 2016
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760.
CVE-2016-1355MedMar 3, 2016
Cisco Systems, Inc.
Firesight System Software
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687.
CVE-2016-1354MedMar 3, 2016
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.
CVE-2016-1331MedFeb 15, 2016
Cisco Systems, Inc.
Emergency Responder
risk 0.40cvss 6.1epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy10766.
CVE-2016-1318MedFeb 9, 2016
Cisco Systems, Inc.
Application Policy Infrastructure Controller Enterprise Module
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489.
CVE-2016-1309MedFeb 7, 2016
Cisco Systems, Inc.
Webex Meetings Server
risk 0.40cvss 6.1epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843.

Page 62 of 140