Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-11909	Treck TCP/IP stack	Med	0.35	5.3	0.04	Jun 17, 2020	The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
CVE-2020-3339	Cisco Systems, Inc. Prime Infrastructure	Med	0.35	5.4	0.01	Jun 3, 2020	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker…
CVE-2020-3333	Cisco Systems, Inc. Application Services Engine	Med	0.35	5.3	0.01	Jun 3, 2020	A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An…
CVE-2020-3233	Cisco Systems, Inc. Iox	Med	0.35	5.4	0.01	Jun 3, 2020	A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based Local Manager interface of an affected device. The…
CVE-2020-3315	Cisco Systems, Inc. Cisco iOS	Med	0.35	5.3	0.02	May 6, 2020	Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors in how the Snort detection engine handles…
CVE-2020-3307	Cisco Systems, Inc. Firepower Management Center	Med	0.35	5.3	0.01	May 6, 2020	A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could…
CVE-2020-3188	Cisco Systems, Inc. Asa 5510 Firmware	Med	0.35	5.3	0.02	May 6, 2020	A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of…
CVE-2020-3186	Cisco Systems, Inc. Asa 5510 Firmware	Med	0.35	5.3	0.01	May 6, 2020	A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the…
CVE-2020-3193	Cisco Systems, Inc. Prime Collaboration Provisioning	Med	0.35	5.3	0.01	Mar 4, 2020	A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-based management…
CVE-2020-3185	Cisco Systems, Inc. Telepresence Management Suite	Med	0.35	5.4	0.01	Mar 4, 2020	A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3164	Cisco Systems, Inc. Content Security Management Appliance	Med	0.35	5.3	0.01	Mar 4, 2020	A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated remote attacker to cause high CPU usage on an…
CVE-2020-3157	Cisco Systems, Inc. Identity Services Engine Software	Med	0.35	5.4	0.01	Mar 4, 2020	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient…
CVE-2020-3170	Cisco Systems, Inc. NX-OS Software	Med	0.35	5.3	0.02	Feb 26, 2020	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API.…
CVE-2020-3160	Cisco Systems, Inc. Meeting Server	Med	0.35	5.3	0.01	Feb 19, 2020	A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and…
CVE-2020-3113	Cisco Systems, Inc. Data Center Network Manager	Med	0.35	5.4	0.01	Feb 19, 2020	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3139	Cisco Systems, Inc. Application Policy Infrastructure Controller	Med	0.35	5.3	0.01	Jan 26, 2020	A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP ports. These IP ports would be…
CVE-2019-16008	Cisco Systems, Inc. IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware	Med	0.35	5.4	0.01	Jan 26, 2020	A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The…
CVE-2019-16003	Cisco Systems, Inc. Ucs Director	Med	0.35	5.3	0.01	Jan 26, 2020	A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management…
CVE-2019-15998	Cisco Systems, Inc. iOS Xr	Med	0.35	5.3	0.01	Nov 26, 2019	A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a…
CVE-2019-15990	Cisco Systems, Inc. Small Business RV Series Routers	Med	0.35	5.3	0.01	Nov 26, 2019	A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP…
CVE-2019-15988	Cisco Systems, Inc. AsyncOS Software	Med	0.35	5.3	0.01	Nov 26, 2019	A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input…
CVE-2019-15987	Cisco Systems, Inc. Webex Meeting Center	Med	0.35	5.3	0.02	Nov 26, 2019	A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA…
CVE-2019-15968	Cisco Systems, Inc. Unified Communications Domain Manager	Med	0.35	5.4	0.01	Nov 26, 2019	A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…
CVE-2019-15960	Cisco Systems, Inc. Webex Meetings	Med	0.35	5.4	0.01	Nov 26, 2019	A vulnerability in the Webex Network Recording Admin page of Cisco Webex Meetings could allow an authenticated, remote attacker to elevate privileges in the context of the affected page. To exploit this vulnerability, the attacker must be logged in as a low-level administrator.…
CVE-2019-1982	Cisco Systems, Inc. Firepower Services Software For Asa	Med	0.35	5.3	0.01	Nov 5, 2019	A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The…
CVE-2019-1980	Cisco Systems, Inc. Firepower Services Software For Asa	Med	0.35	5.3	0.01	Nov 5, 2019	A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The…
CVE-2019-15282	Cisco Systems, Inc. Identity Services Engine Software	Med	0.35	5.3	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the…
CVE-2019-15270	Cisco Systems, Inc. Firepower Management Center	Med	0.35	5.4	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2019-12702	Cisco Systems, Inc. SPA100 Series Analog Telephone Adapters	Med	0.35	5.4	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the…
CVE-2019-12638	Cisco Systems, Inc. Identity Services Engine Software	Med	0.35	5.4	0.01	Oct 16, 2019	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerability is due to…
CVE-2019-12637	Cisco Systems, Inc. Identity Services Engine Software	Med	0.35	5.4	0.01	Oct 16, 2019	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerabilities are due to…
CVE-2019-12620	Cisco Systems, Inc. HyperFlex Software	Med	0.35	5.3	0.01	Sep 18, 2019	A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An…
CVE-2019-1969	Cisco Systems, Inc. NX-OS Software	Med	0.35	5.3	0.01	Aug 30, 2019	A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP…
CVE-2019-1922	Cisco Systems, Inc. Sip IP Phone Software	Med	0.35	5.3	0.01	Jul 6, 2019	A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to insufficient validation of input Session…
CVE-2019-1899	Cisco Systems, Inc. Rv110w	Med	0.35	5.3	0.03	Jun 20, 2019	A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An…
CVE-2019-1897	Cisco Systems, Inc. Rv110w	Med	0.35	5.3	0.04	Jun 20, 2019	A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper…
CVE-2019-1631	Cisco Systems, Inc. Cisco Integrated Management Controller (IMC)	Med	0.35	5.3	0.02	Jun 20, 2019	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection…
CVE-2019-1629	Cisco Systems, Inc. IMC	Med	0.35	5.3	0.02	Jun 20, 2019	A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily…
CVE-2019-1882	Cisco Systems, Inc. Industrial Network Director	Med	0.35	5.4	0.01	Jun 5, 2019	A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit…
CVE-2019-1872	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.35	5.3	0.02	Jun 5, 2019	A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on…
CVE-2019-1842	Cisco Systems, Inc. iOS Xr Software	Med	0.35	5.4	0.01	Jun 5, 2019	A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when…
CVE-2019-1733	Cisco Systems, Inc. NX-API Sandbox	Med	0.35	5.4	0.01	May 15, 2019	A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to…
CVE-2019-1844	Cisco Systems, Inc. Email Security Appliance	Med	0.35	5.3	0.02	May 3, 2019	A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content…
CVE-2019-1838	Cisco Systems, Inc. Application Policy Infrastructure Controller	Med	0.35	5.4	0.01	May 3, 2019	A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…
CVE-2019-1715	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.35	5.3	0.02	May 3, 2019	A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2019-1705	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.35	5.3	0.02	May 3, 2019	A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with…
CVE-2019-1692	Cisco Systems, Inc. Application Policy Infrastructure Controller	Med	0.35	5.3	0.01	May 3, 2019	A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection…
CVE-2019-1837	Cisco Systems, Inc. Unified Communications Manager	Med	0.35	5.3	0.02	Apr 18, 2019	A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the management GUI. The vulnerability is due to improper validation of input…
CVE-2019-1777	Cisco Systems, Inc. Registered Envelope Service	Med	0.35	5.4	0.01	Apr 18, 2019	A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient validation of…
CVE-2019-1711	Cisco Systems, Inc. iOS Xr	Med	0.35	5.3	0.02	Apr 17, 2019	A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of gRPC requests. An attacker…

CVE-2020-11909MedJun 17, 2020
Treck
TCP/IP stack
risk 0.35cvss 5.3epss 0.04
The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
CVE-2020-3339MedJun 3, 2020
Cisco Systems, Inc.
Prime Infrastructure
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker…
CVE-2020-3333MedJun 3, 2020
Cisco Systems, Inc.
Application Services Engine
risk 0.35cvss 5.3epss 0.01
A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An…
CVE-2020-3233MedJun 3, 2020
Cisco Systems, Inc.
Iox
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based Local Manager interface of an affected device. The…
CVE-2020-3315MedMay 6, 2020
Cisco Systems, Inc.
Cisco iOS
risk 0.35cvss 5.3epss 0.02
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors in how the Snort detection engine handles…
CVE-2020-3307MedMay 6, 2020
Cisco Systems, Inc.
Firepower Management Center
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could…
CVE-2020-3188MedMay 6, 2020
Cisco Systems, Inc.
Asa 5510 Firmware
risk 0.35cvss 5.3epss 0.02
A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected device, which could result in a denial of…
CVE-2020-3186MedMay 6, 2020
Cisco Systems, Inc.
Asa 5510 Firmware
risk 0.35cvss 5.3epss 0.01
A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the…
CVE-2020-3193MedMar 4, 2020
Cisco Systems, Inc.
Prime Collaboration Provisioning
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-based management…
CVE-2020-3185MedMar 4, 2020
Cisco Systems, Inc.
Telepresence Management Suite
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3164MedMar 4, 2020
Cisco Systems, Inc.
Content Security Management Appliance
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated remote attacker to cause high CPU usage on an…
CVE-2020-3157MedMar 4, 2020
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient…
CVE-2020-3170MedFeb 26, 2020
Cisco Systems, Inc.
NX-OS Software
risk 0.35cvss 5.3epss 0.02
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API.…
CVE-2020-3160MedFeb 19, 2020
Cisco Systems, Inc.
Meeting Server
risk 0.35cvss 5.3epss 0.01
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and…
CVE-2020-3113MedFeb 19, 2020
Cisco Systems, Inc.
Data Center Network Manager
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2020-3139MedJan 26, 2020
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.35cvss 5.3epss 0.01
A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP ports. These IP ports would be…
CVE-2019-16008MedJan 26, 2020
Cisco Systems, Inc.
IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based GUI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of an affected system. The…
CVE-2019-16003MedJan 26, 2020
Cisco Systems, Inc.
Ucs Director
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management…
CVE-2019-15998MedNov 26, 2019
Cisco Systems, Inc.
iOS Xr
risk 0.35cvss 5.3epss 0.01
A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a…
CVE-2019-15990MedNov 26, 2019
Cisco Systems, Inc.
Small Business RV Series Routers
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP…
CVE-2019-15988MedNov 26, 2019
Cisco Systems, Inc.
AsyncOS Software
risk 0.35cvss 5.3epss 0.01
A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input…
CVE-2019-15987MedNov 26, 2019
Cisco Systems, Inc.
Webex Meeting Center
risk 0.35cvss 5.3epss 0.02
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA…
CVE-2019-15968MedNov 26, 2019
Cisco Systems, Inc.
Unified Communications Domain Manager
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…
CVE-2019-15960MedNov 26, 2019
Cisco Systems, Inc.
Webex Meetings
risk 0.35cvss 5.4epss 0.01
A vulnerability in the Webex Network Recording Admin page of Cisco Webex Meetings could allow an authenticated, remote attacker to elevate privileges in the context of the affected page. To exploit this vulnerability, the attacker must be logged in as a low-level administrator.…
CVE-2019-1982MedNov 5, 2019
Cisco Systems, Inc.
Firepower Services Software For Asa
risk 0.35cvss 5.3epss 0.01
A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The…
CVE-2019-1980MedNov 5, 2019
Cisco Systems, Inc.
Firepower Services Software For Asa
risk 0.35cvss 5.3epss 0.01
A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The…
CVE-2019-15282MedOct 16, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected device. The vulnerability is due an issue in the authentication logic of the…
CVE-2019-15270MedOct 16, 2019
Cisco Systems, Inc.
Firepower Management Center
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to…
CVE-2019-12702MedOct 16, 2019
Cisco Systems, Inc.
SPA100 Series Analog Telephone Adapters
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input by the…
CVE-2019-12638MedOct 16, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerability is due to…
CVE-2019-12637MedOct 16, 2019
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.35cvss 5.4epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web-based management interface. The vulnerabilities are due to…
CVE-2019-12620MedSep 18, 2019
Cisco Systems, Inc.
HyperFlex Software
risk 0.35cvss 5.3epss 0.01
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An…
CVE-2019-1969MedAug 30, 2019
Cisco Systems, Inc.
NX-OS Software
risk 0.35cvss 5.3epss 0.01
A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP…
CVE-2019-1922MedJul 6, 2019
Cisco Systems, Inc.
Sip IP Phone Software
risk 0.35cvss 5.3epss 0.01
A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to insufficient validation of input Session…
CVE-2019-1899MedJun 20, 2019
Cisco Systems, Inc.
Rv110w
risk 0.35cvss 5.3epss 0.03
A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An…
CVE-2019-1897MedJun 20, 2019
Cisco Systems, Inc.
Rv110w
risk 0.35cvss 5.3epss 0.04
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper…
CVE-2019-1631MedJun 20, 2019
Cisco Systems, Inc.
Cisco Integrated Management Controller (IMC)
risk 0.35cvss 5.3epss 0.02
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection…
CVE-2019-1629MedJun 20, 2019
Cisco Systems, Inc.
IMC
risk 0.35cvss 5.3epss 0.02
A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily…
CVE-2019-1882MedJun 5, 2019
Cisco Systems, Inc.
Industrial Network Director
risk 0.35cvss 5.4epss 0.01
A vulnerability in Cisco Industrial Network Director could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks. The vulnerability is due to improper validation of content submitted to the affected application. An attacker could exploit…
CVE-2019-1872MedJun 5, 2019
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.35cvss 5.3epss 0.02
A vulnerability in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on…
CVE-2019-1842MedJun 5, 2019
Cisco Systems, Inc.
iOS Xr Software
risk 0.35cvss 5.4epss 0.01
A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when…
CVE-2019-1733MedMay 15, 2019
Cisco Systems, Inc.
NX-API Sandbox
risk 0.35cvss 5.4epss 0.01
A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to…
CVE-2019-1844MedMay 3, 2019
Cisco Systems, Inc.
Email Security Appliance
risk 0.35cvss 5.3epss 0.02
A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected device. The vulnerability is due to improper detection of certain content…
CVE-2019-1838MedMay 3, 2019
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected…
CVE-2019-1715MedMay 3, 2019
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.35cvss 5.3epss 0.02
A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2019-1705MedMay 3, 2019
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.35cvss 5.3epss 0.02
A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with…
CVE-2019-1692MedMay 3, 2019
Cisco Systems, Inc.
Application Policy Infrastructure Controller
risk 0.35cvss 5.3epss 0.01
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection…
CVE-2019-1837MedApr 18, 2019
Cisco Systems, Inc.
Unified Communications Manager
risk 0.35cvss 5.3epss 0.02
A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the management GUI. The vulnerability is due to improper validation of input…
CVE-2019-1777MedApr 18, 2019
Cisco Systems, Inc.
Registered Envelope Service
risk 0.35cvss 5.4epss 0.01
A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient validation of…
CVE-2019-1711MedApr 17, 2019
Cisco Systems, Inc.
iOS Xr
risk 0.35cvss 5.3epss 0.02
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of gRPC requests. An attacker…

Page 74 of 140