Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,114 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-34759	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Sep 2, 2021	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability…
CVE-2021-34715	Cisco Systems, Inc. Telepresence Video Communication Server	Med	0.31	4.7	0.01	Aug 18, 2021	A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating system. The vulnerability…
CVE-2021-1607	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Jul 8, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1606	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Jul 8, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1605	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Jul 8, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1604	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Jul 8, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1603	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Jul 8, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1395	Cisco Systems, Inc. Unified Intelligence Center	Med	0.31	4.7	0.01	Jun 16, 2021	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management…
CVE-2021-1538	Cisco Systems, Inc. Common Services Platform Collector (CSPC)	Med	0.31	4.7	0.02	Jun 4, 2021	A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit…
CVE-2021-1536	Cisco Systems, Inc. Webex Meetings Server	Med	0.31	4.8	0.00	Jun 4, 2021	A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device.…
CVE-2021-1525	Cisco Systems, Inc. Webex Meetings Server	Med	0.31	4.7	0.01	Jun 4, 2021	A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit…
CVE-2021-1555	Cisco Systems, Inc. Small Business Wireless Access Ppoints	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1554	Cisco Systems, Inc. Small Business Wireless Access Ppoints	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1553	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1552	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1551	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1550	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1549	Cisco Systems, Inc. Small Business Wireless Access Ppoints	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1548	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1547	Cisco Systems, Inc. Small Business 100 Series Wireless Access Points	Med	0.31	4.7	0.02	May 22, 2021	Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1358	Cisco Systems, Inc. Finesse	Med	0.31	4.7	0.01	May 22, 2021	A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an…
CVE-2021-1254	Cisco Systems, Inc. Finesse	Med	0.31	4.8	0.01	May 22, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied…
CVE-2021-1519	Cisco Systems, Inc. Anyconnect Secure Mobility Client	Med	0.31	4.7	0.00	May 6, 2021	A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied…
CVE-2021-1490	Cisco Systems, Inc. AsyncOS for Cisco Web Security Appliance	Med	0.31	4.7	0.01	May 6, 2021	A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability…
CVE-2021-1397	Cisco Systems, Inc. Integrated Management Controller Software	Med	0.31	4.7	0.01	May 6, 2021	A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in…
CVE-2021-1458	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.01	Apr 29, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1457	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.01	Apr 29, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1456	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.01	Apr 29, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1455	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.8	0.01	Apr 29, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1420	Cisco Systems, Inc. Webex Meetings	Med	0.31	4.7	0.01	Apr 8, 2021	A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this…
CVE-2021-1374	Cisco Systems, Inc. Catalyst 9000 Family	Med	0.31	4.8	0.01	Mar 24, 2021	A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the web-based…
CVE-2021-1231	Cisco Systems, Inc. Nexus 9000 Series Fabric Switches	Med	0.31	4.7	0.00	Feb 24, 2021	A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) interface. This…
CVE-2021-1271	Cisco Systems, Inc. AsyncOS for Cisco Web Security Appliance	Med	0.31	4.8	0.01	Jan 20, 2021	A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. The…
CVE-2021-1310	Cisco Systems, Inc. Webex Meetings	Med	0.31	4.7	0.02	Jan 13, 2021	A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should prompt the user before the redirection. This vulnerability is…
CVE-2021-1240	Cisco Systems, Inc. Proximity Desktop for Windows	Med	0.31	4.8	0.01	Jan 13, 2021	A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This…
CVE-2021-1239	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2021-1238	Cisco Systems, Inc. Firepower Management Center	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2021-1158	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1157	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1156	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1155	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1154	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1153	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1152	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1151	Cisco Systems, Inc. Small Business RV110W	Med	0.31	4.8	0.01	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1130	Cisco Systems, Inc. DNA Center	Med	0.31	4.8	0.01	Jan 13, 2021	A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based…
CVE-2020-26083	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Nov 6, 2020	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists…
CVE-2020-3561	Cisco Systems, Inc. Adaptive Security Appliance (ASA) Software	Med	0.31	4.7	0.01	Oct 21, 2020	A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The…
CVE-2020-3558	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.31	4.7	0.01	Oct 21, 2020	A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an…
CVE-2020-3589	Cisco Systems, Inc. Identity Services Engine Express	Med	0.31	4.8	0.01	Oct 8, 2020	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability…

CVE-2021-34759MedSep 2, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability…
CVE-2021-34715MedAug 18, 2021
Cisco Systems, Inc.
Telepresence Video Communication Server
risk 0.31cvss 4.7epss 0.01
A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating system. The vulnerability…
CVE-2021-1607MedJul 8, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1606MedJul 8, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1605MedJul 8, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1604MedJul 8, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1603MedJul 8, 2021
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user. These vulnerabilities exist because the web-based management…
CVE-2021-1395MedJun 16, 2021
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management…
CVE-2021-1538MedJun 4, 2021
Cisco Systems, Inc.
Common Services Platform Collector (CSPC)
risk 0.31cvss 4.7epss 0.02
A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit…
CVE-2021-1536MedJun 4, 2021
Cisco Systems, Inc.
Webex Meetings Server
risk 0.31cvss 4.8epss 0.00
A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device.…
CVE-2021-1525MedJun 4, 2021
Cisco Systems, Inc.
Webex Meetings Server
risk 0.31cvss 4.7epss 0.01
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit…
CVE-2021-1555MedMay 22, 2021
Cisco Systems, Inc.
Small Business Wireless Access Ppoints
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1554MedMay 22, 2021
Cisco Systems, Inc.
Small Business Wireless Access Ppoints
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1553MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1552MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1551MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1550MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1549MedMay 22, 2021
Cisco Systems, Inc.
Small Business Wireless Access Ppoints
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1548MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1547MedMay 22, 2021
Cisco Systems, Inc.
Small Business 100 Series Wireless Access Points
risk 0.31cvss 4.7epss 0.02
Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are…
CVE-2021-1358MedMay 22, 2021
Cisco Systems, Inc.
Finesse
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an…
CVE-2021-1254MedMay 22, 2021
Cisco Systems, Inc.
Finesse
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied…
CVE-2021-1519MedMay 6, 2021
Cisco Systems, Inc.
Anyconnect Secure Mobility Client
risk 0.31cvss 4.7epss 0.00
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied…
CVE-2021-1490MedMay 6, 2021
Cisco Systems, Inc.
AsyncOS for Cisco Web Security Appliance
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability…
CVE-2021-1397MedMay 6, 2021
Cisco Systems, Inc.
Integrated Management Controller Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in…
CVE-2021-1458MedApr 29, 2021
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1457MedApr 29, 2021
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1456MedApr 29, 2021
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1455MedApr 29, 2021
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to…
CVE-2021-1420MedApr 8, 2021
Cisco Systems, Inc.
Webex Meetings
risk 0.31cvss 4.7epss 0.01
A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this…
CVE-2021-1374MedMar 24, 2021
Cisco Systems, Inc.
Catalyst 9000 Family
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the web-based…
CVE-2021-1231MedFeb 24, 2021
Cisco Systems, Inc.
Nexus 9000 Series Fabric Switches
risk 0.31cvss 4.7epss 0.00
A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) interface. This…
CVE-2021-1271MedJan 20, 2021
Cisco Systems, Inc.
AsyncOS for Cisco Web Security Appliance
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. The…
CVE-2021-1310MedJan 13, 2021
Cisco Systems, Inc.
Webex Meetings
risk 0.31cvss 4.7epss 0.02
A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should prompt the user before the redirection. This vulnerability is…
CVE-2021-1240MedJan 13, 2021
Cisco Systems, Inc.
Proximity Desktop for Windows
risk 0.31cvss 4.8epss 0.01
A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This…
CVE-2021-1239MedJan 13, 2021
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2021-1238MedJan 13, 2021
Cisco Systems, Inc.
Firepower Management Center
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…
CVE-2021-1158MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1157MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1156MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1155MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1154MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1153MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1152MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1151MedJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.31cvss 4.8epss 0.01
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are…
CVE-2021-1130MedJan 13, 2021
Cisco Systems, Inc.
DNA Center
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based…
CVE-2020-26083MedNov 6, 2020
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists…
CVE-2020-3561MedOct 21, 2020
Cisco Systems, Inc.
Adaptive Security Appliance (ASA) Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The…
CVE-2020-3558MedOct 21, 2020
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.31cvss 4.7epss 0.01
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an…
CVE-2020-3589MedOct 8, 2020
Cisco Systems, Inc.
Identity Services Engine Express
risk 0.31cvss 4.8epss 0.01
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability…

Page 83 of 143