Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-20180	Cisco Systems, Inc. Asyncos	Med	0.31	4.8	0.00	Feb 5, 2025	A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. …
CVE-2025-20126	Cisco Systems, Inc. Thousandeyes Endpoint Agent	Med	0.31	4.8	0.00	Jan 8, 2025	A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics information. This vulnerability exists because the affected software does not…
CVE-2025-20123	Cisco Systems, Inc. Crosswork Network Controller	Med	0.31	4.8	0.00	Jan 8, 2025	Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users of the interface of an affected system. These vulnerabilities exist…
CVE-2022-20634	Cisco Systems, Inc. ECE	Med	0.31	4.7	0.01	Nov 15, 2024	A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to…
CVE-2024-20539	Cisco Systems, Inc. ISE	Med	0.31	4.8	0.00	Nov 6, 2024	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate…
CVE-2024-20534	Cisco Systems, Inc. Desk Phone 9800 Series	Med	0.31	4.8	0.00	Nov 6, 2024	A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against…
CVE-2024-20533	Cisco Systems, Inc. Desk Phone 9800 Series	Med	0.31	4.8	0.00	Nov 6, 2024	A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against…
CVE-2024-20415	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is…
CVE-2024-20409	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is…
CVE-2024-20403	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20386	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. This…
CVE-2024-20364	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability…
CVE-2024-20300	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20298	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20269	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20264	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Oct 23, 2024	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20510	Cisco Systems, Inc. iOS Xe	Med	0.31	4.7	0.00	Sep 25, 2024	A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list (ACL), which could allow access to network resources before…
CVE-2024-20479	Cisco Systems, Inc. ISE	Med	0.31	4.8	0.00	Aug 7, 2024	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management…
CVE-2024-20400	Cisco Systems, Inc. Expressway Series	Med	0.31	4.7	0.00	Jul 17, 2024	A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could…
CVE-2024-20296	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.7	0.00	Jul 17, 2024	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin…
CVE-2024-20405	Cisco Systems, Inc. Finesse	Med	0.31	4.8	0.01	Jun 5, 2024	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific…
CVE-2024-20383	Cisco Systems, Inc. Asyncos	Med	0.31	4.8	0.00	May 15, 2024	A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation…
CVE-2024-20369	Cisco Systems, Inc. Network Services Orchestrator	Med	0.31	4.7	0.00	May 15, 2024	A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in…
CVE-2024-20257	Cisco Systems, Inc. Asyncos	Med	0.31	4.8	0.00	May 15, 2024	A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This vulnerability is due to insufficient validation of user…
CVE-2024-20256	Cisco Systems, Inc. Asyncos	Med	0.31	4.8	0.00	May 15, 2024	A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to…
CVE-2024-20354	Cisco Systems, Inc. Wireless Lan Controller Software	Med	0.31	4.7	0.00	Mar 27, 2024	A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of…
CVE-2024-20305	Cisco Systems, Inc. Unity Connection	Med	0.31	4.8	0.00	Jan 26, 2024	A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does…
CVE-2024-20270	Cisco Systems, Inc. Broadworks Application Delivery Platform	Med	0.31	4.8	0.00	Jan 17, 2024	A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the…
CVE-2024-20251	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.00	Jan 17, 2024	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists…
CVE-2023-20257	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Jan 17, 2024	A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management…
CVE-2023-20208	Cisco Systems, Inc. ISE	Med	0.31	4.8	0.00	Nov 21, 2023	A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.
CVE-2023-20196	Cisco Systems, Inc. ISE	Med	0.31	4.7	0.01	Nov 1, 2023	Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to…
CVE-2023-20195	Cisco Systems, Inc. ISE	Med	0.31	4.7	0.01	Nov 1, 2023	Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to…
CVE-2023-20074	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 1, 2023	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20041	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 1, 2023	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20005	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 1, 2023	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20268	Cisco Systems, Inc. access point (AP) software	Med	0.31	4.7	0.00	Sep 27, 2023	A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling…
CVE-2023-20263	Cisco Systems, Inc. Hyperflex Hx Data Platform	Med	0.31	4.7	0.00	Sep 6, 2023	A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request.…
CVE-2023-20222	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Aug 16, 2023	A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected…
CVE-2023-20201	Cisco Systems, Inc. Prime Infrastructure	Med	0.31	4.8	0.00	Aug 16, 2023	Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface…
CVE-2023-20242	Cisco Systems, Inc. Unified Communications Manager	Med	0.31	4.8	0.00	Aug 16, 2023	A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2023-20188	Cisco Systems, Inc. Small Business 300 Series Managed Switches	Med	0.31	4.8	0.00	Jun 28, 2023	A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a…
CVE-2023-20003	Cisco Systems, Inc. Business Wireless Access Points	Med	0.31	4.7	0.00	May 18, 2023	A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login…
CVE-2023-20007	Cisco Systems, Inc. Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers	Med	0.31	4.7	0.01	Jan 20, 2023	A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart…
CVE-2022-20967	Cisco Systems, Inc. Identity Services Engine Software	Med	0.31	4.8	0.01	Jan 20, 2023	A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to…
CVE-2022-20936	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 15, 2022	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20935	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.00	Nov 15, 2022	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20932	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 15, 2022	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20905	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 15, 2022	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20872	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.00	Nov 15, 2022	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …

CVE-2025-20180MedFeb 5, 2025
Cisco Systems, Inc.
Asyncos
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. …
CVE-2025-20126MedJan 8, 2025
Cisco Systems, Inc.
Thousandeyes Endpoint Agent
risk 0.31cvss 4.8epss 0.00
A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics information. This vulnerability exists because the affected software does not…
CVE-2025-20123MedJan 8, 2025
Cisco Systems, Inc.
Crosswork Network Controller
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against users of the interface of an affected system. These vulnerabilities exist…
CVE-2022-20634MedNov 15, 2024
Cisco Systems, Inc.
ECE
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to…
CVE-2024-20539MedNov 6, 2024
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate…
CVE-2024-20534MedNov 6, 2024
Cisco Systems, Inc.
Desk Phone 9800 Series
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against…
CVE-2024-20533MedNov 6, 2024
Cisco Systems, Inc.
Desk Phone 9800 Series
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting (XSS) attacks against…
CVE-2024-20415MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is…
CVE-2024-20409MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is…
CVE-2024-20403MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20386MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. This…
CVE-2024-20364MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability…
CVE-2024-20300MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20298MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20269MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20264MedOct 23, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due…
CVE-2024-20510MedSep 25, 2024
Cisco Systems, Inc.
iOS Xe
risk 0.31cvss 4.7epss 0.00
A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list (ACL), which could allow access to network resources before…
CVE-2024-20479MedAug 7, 2024
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management…
CVE-2024-20400MedJul 17, 2024
Cisco Systems, Inc.
Expressway Series
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could…
CVE-2024-20296MedJul 17, 2024
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin…
CVE-2024-20405MedJun 5, 2024
Cisco Systems, Inc.
Finesse
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific…
CVE-2024-20383MedMay 15, 2024
Cisco Systems, Inc.
Asyncos
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation…
CVE-2024-20369MedMay 15, 2024
Cisco Systems, Inc.
Network Services Orchestrator
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in…
CVE-2024-20257MedMay 15, 2024
Cisco Systems, Inc.
Asyncos
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This vulnerability is due to insufficient validation of user…
CVE-2024-20256MedMay 15, 2024
Cisco Systems, Inc.
Asyncos
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to…
CVE-2024-20354MedMar 27, 2024
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.31cvss 4.7epss 0.00
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of…
CVE-2024-20305MedJan 26, 2024
Cisco Systems, Inc.
Unity Connection
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does…
CVE-2024-20270MedJan 17, 2024
Cisco Systems, Inc.
Broadworks Application Delivery Platform
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the…
CVE-2024-20251MedJan 17, 2024
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists…
CVE-2023-20257MedJan 17, 2024
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management…
CVE-2023-20208MedNov 21, 2023
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.
CVE-2023-20196MedNov 1, 2023
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.7epss 0.01
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to…
CVE-2023-20195MedNov 1, 2023
Cisco Systems, Inc.
ISE
risk 0.31cvss 4.7epss 0.01
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to…
CVE-2023-20074MedNov 1, 2023
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20041MedNov 1, 2023
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20005MedNov 1, 2023
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These…
CVE-2023-20268MedSep 27, 2023
Cisco Systems, Inc.
access point (AP) software
risk 0.31cvss 4.7epss 0.00
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling…
CVE-2023-20263MedSep 6, 2023
Cisco Systems, Inc.
Hyperflex Hx Data Platform
risk 0.31cvss 4.7epss 0.00
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request.…
CVE-2023-20222MedAug 16, 2023
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected…
CVE-2023-20201MedAug 16, 2023
Cisco Systems, Inc.
Prime Infrastructure
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface…
CVE-2023-20242MedAug 16, 2023
Cisco Systems, Inc.
Unified Communications Manager
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an…
CVE-2023-20188MedJun 28, 2023
Cisco Systems, Inc.
Small Business 300 Series Managed Switches
risk 0.31cvss 4.8epss 0.00
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a…
CVE-2023-20003MedMay 18, 2023
Cisco Systems, Inc.
Business Wireless Access Points
risk 0.31cvss 4.7epss 0.00
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login…
CVE-2023-20007MedJan 20, 2023
Cisco Systems, Inc.
Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart…
CVE-2022-20967MedJan 20, 2023
Cisco Systems, Inc.
Identity Services Engine Software
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the application web-based management interface. This vulnerability is due to…
CVE-2022-20936MedNov 15, 2022
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20935MedNov 15, 2022
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20932MedNov 15, 2022
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20905MedNov 15, 2022
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …
CVE-2022-20872MedNov 15, 2022
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.00
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. …

Page 81 of 140