Cross-site scripting (XSS) vulnerability in the Guest Server in Cisco Jabber allows remote attackers to inject arbitrary web script or HTML via a (1) GET or (2) POST parameter, aka Bug ID CSCus08074.
Max CVSS
4.3
EPSS Score
0.22%
Published
2014-12-23
Updated
2017-01-03
The API in the Guest Server in Cisco Jabber, when HTML5 is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST response, aka Bug ID CSCus19801.
Max CVSS
4.3
EPSS Score
0.32%
Published
2014-12-23
Updated
2017-01-03
The API in the Guest Server in Cisco Jabber, when the HTML5 CORS feature is used, allows remote attackers to obtain sensitive information by sniffing the network during an HTTP (1) GET or (2) POST request, aka Bug ID CSCus19789.
Max CVSS
4.3
EPSS Score
0.32%
Published
2014-12-23
Updated
2017-01-03
Directory traversal vulnerability in Cisco Enterprise Content Delivery System (ECDS) allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCuo90148.
Max CVSS
5.0
EPSS Score
0.34%
Published
2014-12-20
Updated
2017-01-03
Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur19630, and CSCur19661.
Max CVSS
4.3
EPSS Score
0.19%
Published
2014-12-22
Updated
2017-01-03
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.
Max CVSS
5.0
EPSS Score
0.28%
Published
2014-12-22
Updated
2017-01-03
The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages, aka Bug ID CSCzv93864.
Max CVSS
5.0
EPSS Score
0.19%
Published
2014-12-19
Updated
2014-12-19
The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.
Max CVSS
4.0
EPSS Score
0.08%
Published
2014-12-22
Updated
2017-01-03
Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710.
Max CVSS
5.0
EPSS Score
0.19%
Published
2014-12-18
Updated
2017-01-03
Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.
Max CVSS
4.3
EPSS Score
0.14%
Published
2014-12-18
Updated
2023-08-11
The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID CSCuq50205.
Max CVSS
6.5
EPSS Score
0.18%
Published
2014-12-10
Updated
2017-01-03
The Management subsystem in Cisco Unified Computing System 2.1(3f) and earlier allows remote attackers to obtain sensitive information by reading log files, aka Bug ID CSCur99239.
Max CVSS
5.0
EPSS Score
0.26%
Published
2014-12-10
Updated
2015-01-24
Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID CSCum00019.
Max CVSS
4.0
EPSS Score
0.10%
Published
2014-12-20
Updated
2017-01-03
The Disaster Recovery (DRA) feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422.
Max CVSS
4.3
EPSS Score
0.15%
Published
2014-12-17
Updated
2014-12-17
Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998.
Max CVSS
7.2
EPSS Score
0.04%
Published
2014-12-10
Updated
2015-01-24
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565.
Max CVSS
7.7
EPSS Score
0.12%
Published
2014-12-24
Updated
2014-12-24
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port, aka Cisco-Meraki defect ID 00302077.
Max CVSS
7.2
EPSS Score
0.04%
Published
2014-12-24
Updated
2014-12-24
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID 00301991.
Max CVSS
5.4
EPSS Score
0.20%
Published
2014-12-24
Updated
2014-12-24
Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012.
Max CVSS
3.3
EPSS Score
0.20%
Published
2014-12-24
Updated
2014-12-24
The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then (1) sniffing the network for a syslog message or (2) reading a syslog message in a file on a syslog server, aka Bug IDs CSCuq22357 and CSCur41860.
Max CVSS
4.3
EPSS Score
0.29%
Published
2014-12-20
Updated
2023-08-11
Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Prime Security Manager (aka PRSM) 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) Access Policies or (2) Device Summary Dashboard parameter, aka Bug ID CSCuq80661.
Max CVSS
4.3
EPSS Score
0.14%
Published
2014-12-13
Updated
2014-12-16
21 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!