VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2015-4268Jul 14, 2015
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine (ISE) 1.2(1.198) and 1.3(0.876) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID…

  • CVE-2015-4272Jul 14, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified Communications Manager (formerly CallManager) 10.5(2.10000.5) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580.

  • CVE-2015-4269Jul 14, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    The Tomcat throttling feature in Cisco Unified Communications Manager 10.5(1.99995.9) allows remote authenticated users to cause a denial of service (management outage) by sending many requests, aka Bug ID CSCuu99709.

  • CVE-2015-4263Jul 10, 2015
    Cisco Systems, Inc.
    Mobility Services Engine
    risk 0.00cvss —epss 0.01

    The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.

  • CVE-2015-4236Jul 10, 2015
    Cisco Systems, Inc.
    Email Security Appliance Firmware
    risk 0.00cvss —epss 0.02

    Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service (clustering and SSH outage) via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636.

  • CVE-2015-4254Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Advanced Media Gateway
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732.

  • CVE-2015-4259Jul 10, 2015
    Cisco Systems, Inc.
    Unified Computing System
    risk 0.00cvss —epss 0.01

    The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of…

  • CVE-2015-4260Jul 10, 2015
    Cisco Systems, Inc.
    Hosted Collaboration Solution
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862.

  • CVE-2015-4244Jul 10, 2015
    Cisco Systems, Inc.
    Asr 5000
    risk 0.00cvss —epss 0.00

    The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash (CF) file, aka Bug ID CSCuu75278.

  • CVE-2015-4258Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Mse 8000 Series
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444.

  • CVE-2015-4257Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Mcu Software
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710.

  • CVE-2015-4256Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Ip Vcr 3.0
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736.

  • CVE-2015-4255Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence IP Gateway
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734.

  • CVE-2015-4253Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Serial Gateway
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Serial Gateway devices with software 1.0(1.42) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728.

  • CVE-2015-4252Jul 10, 2015
    Cisco Systems, Inc.
    Telepresence Isdn Gw 3241
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.2(1.106) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724.

  • CVE-2015-4243Jul 8, 2015
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.01

    The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202.

  • CVE-2015-4242Jul 8, 2015
    Cisco Systems, Inc.
    Firesight System Software
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721.

  • CVE-2015-4241Jul 8, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679.

  • CVE-2015-4240Jul 8, 2015
    Cisco Systems, Inc.
    IP Communicator
    risk 0.00cvss —epss 0.02

    Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug ID CSCuu37656.

  • CVE-2015-4230Jul 6, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.03

    Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91854.

  • CVE-2015-4196Jul 4, 2015
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.00cvss —epss 0.02

    Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID…

  • CVE-2015-4239Jul 3, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220.

  • CVE-2015-4237Jul 3, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.00

    The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480,…

  • CVE-2015-4234Jul 3, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.00

    Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input to the Python interpreter, aka Bug IDs CSCun02887, CSCur00115, and CSCur00127.

  • CVE-2015-4232Jul 3, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.00

    Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856.

  • CVE-2015-4231Jul 3, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.00

    The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416.

  • CVE-2015-4238Jul 2, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601.

  • CVE-2015-4228Jul 2, 2015
    Cisco Systems, Inc.
    Digital Content Manager
    risk 0.00cvss —epss 0.01

    Cisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of service (reboot) via malformed ad messages, aka Bug ID CSCur13999.

  • CVE-2015-4233Jul 2, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037.

  • CVE-2015-4226Jun 30, 2015
    Cisco Systems, Inc.
    Unified IP Phones 9900 Series Firmware
    risk 0.00cvss —epss 0.03

    The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cause a denial of service (device hang) by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976.

  • CVE-2015-4229Jun 30, 2015
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.00cvss —epss 0.03

    The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589.

  • CVE-2015-4227Jun 30, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.03

    Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838.

  • CVE-2015-4225Jun 27, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.02

    Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.

  • CVE-2015-4199Jun 27, 2015
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash) by triggering intermittent connectivity with many IPv6 CPE…

  • CVE-2015-4224Jun 26, 2015
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.00

    Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474.

  • CVE-2015-4222Jun 26, 2015
    Cisco Systems, Inc.
    Unified Communications Manager Im And Presence Service
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.

  • CVE-2015-4221Jun 26, 2015
    Cisco Systems, Inc.
    Unified Communications Manager Im And Presence Service
    risk 0.00cvss —epss 0.02

    Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then…

  • CVE-2015-4217Jun 26, 2015
    Cisco Systems, Inc.
    Email Security Appliance Firmware
    risk 0.00cvss —epss 0.02

    The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which…

  • CVE-2015-4216Jun 26, 2015
    Cisco Systems, Inc.
    Email Security Appliance Firmware
    risk 0.00cvss —epss 0.03

    The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations,…

  • CVE-2015-4223Jun 25, 2015
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, aka Bug ID CSCuu77478.

  • CVE-2015-4220Jun 25, 2015
    Cisco Systems, Inc.
    Unified Presence Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.

  • CVE-2015-4219Jun 24, 2015
    Cisco Systems, Inc.
    Secure Access Control System
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force…

  • CVE-2015-4218Jun 24, 2015
    Cisco Systems, Inc.
    Jabber
    risk 0.00cvss —epss 0.03

    The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.

  • CVE-2015-4215Jun 24, 2015
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.01

    Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.

  • CVE-2015-4214Jun 24, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050.

  • CVE-2015-4213Jun 24, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.03

    Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391.

  • CVE-2015-4212Jun 24, 2015
    Cisco Systems, Inc.
    Webex Meeting Center
    risk 0.00cvss —epss 0.03

    Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.

  • CVE-2015-4211Jun 24, 2015
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.00cvss —epss 0.00

    Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.

  • CVE-2015-4208Jun 24, 2015
    Cisco Systems, Inc.
    Webex Meeting Center
    risk 0.00cvss —epss 0.03

    Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.

  • CVE-2015-4210Jun 23, 2015
    Cisco Systems, Inc.
    Webex Meeting Center
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.

Page 99 of 140