Vulnerabilities

TI-2013-04685 CVE-2013-5488 · GHSA-x4cm-7ff7-8m4h

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco…

LOW 26

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ compo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0157 Published 2013-09-12 No fix listed CWE-20

TI-2013-03005 CVE-2013-3440 · GHSA-x6r5-h6rv-j7r3

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured coo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2013-07-23 No fix listed CWE-79

TI-2013-03004 CVE-2013-3439 · GHSA-38c3-hhmq-4vwf

Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows…

LOW 24

Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01792 Published 2013-07-23 No fix listed CWE-79

TI-2013-03002 CVE-2013-3437 · GHSA-6c86-m3mj-rj89

SQL injection vulnerability in the management application in Cisco Unified Operations…

LOW 31

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01029 Published 2013-07-22 No fix listed CWE-89

TI-2013-02983 CVE-2013-3416 · GHSA-6qx7-j54g-9782

Cross-site scripting (XSS) vulnerability in the web framework in the…

LOW 22

Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote attackers to inject arbi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-07-10 No fix listed CWE-79

TI-2011-02397 CVE-2011-2738 · GHSA-p673-9wxq-39cc

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used…

MEDIUM 56

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix pro…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10963 Published 2011-09-17 No fix listed

TI-2011-00833 CVE-2011-0962 · GHSA-hq75-7jp8-q8x3

Cross-site scripting (XSS) vulnerability in…

LOW 29

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote attackers to inject a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06502 Published 2011-05-20 No fix listed CWE-79

TI-2011-00831 CVE-2011-0960 · GHSA-gp85-9v5p-3cfv

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before…

LOW 39

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03779 Published 2011-05-20 No fix listed CWE-89

TI-2011-00830 CVE-2011-0959 · GHSA-5cgr-rxfv-wjgv

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager…

LOW 39

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.21464 Published 2011-05-20 No fix listed CWE-79

TI-2010-02906 CVE-2010-3036 · GHSA-36rh-2x2f-hxh9

Multiple buffer overflows in the authentication functionality in the web-server module in…

MEDIUM 52

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05992 Published 2010-10-29 No fix listed CWE-119

TI-2009-01101 CVE-2009-1161 · GHSA-p549-g2jj-vm8x

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services…

MEDIUM 60

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessme…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16532 Published 2009-05-21 No fix listed CWE-22

Vulnerabilities

Filters