Priority LOW 29
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interfac…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00774 · Published 2021-10-06 · No fix listed CWE-79
Priority LOW 37
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration changes.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00947 · Published 2020-10-08 · No fix listed CWE-306
Priority LOW 37
A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2020-09-23 · No fix listed CWE-306
Priority LOW 32
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01095 · Published 2020-08-26 · No fix listed CWE-16
Priority LOW 28
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traversal attacks and obtai…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.03041 · Published 2020-08-26 · No fix listed CWE-22
Priority LOW 29
A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they sh…
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00676 · Published 2020-08-26 · No fix listed CWE-264
Priority LOW 26
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting (XSS) attack a…
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00617 · Published 2020-08-26 · No fix listed CWE-79
Priority LOW 24
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01021 · Published 2020-07-16 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0534 · Published 2019-07-17 · Fixed in 6.1sp3 CWE-287