Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Vision Dynamic Signage Director · all components

Priority LOW 37

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration changes.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00947 Published 2020-10-08 No fix listed CWE-306
Priority LOW 37

A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01027 Published 2020-09-23 No fix listed CWE-306
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interfac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2021-10-06 No fix listed CWE-79
Priority LOW 29

A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they sh…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00676 Published 2020-08-26 No fix listed CWE-264
Priority LOW 28

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traversal attacks and obtai…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.03041 Published 2020-08-26 No fix listed CWE-22
Priority LOW 26

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting (XSS) attack a…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00617 Published 2020-08-26 No fix listed CWE-79
Priority LOW 24

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01021 Published 2020-07-16 No fix listed CWE-89
Open these records in search →