Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Cisco IOS XE Software 3.2.11aSG — 20190925 Cisco IOS XE Software Web UI Command Injection Vulnerabilities Clear all filters
TI-2019-09447 CVE-2019-12651 · GHSA-375x-49qp-94gv

Cisco IOS XE Software Web UI Command Injection Vulnerabilities

Priority MEDIUM 43

Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02543 Published 2019-09-25 No fix listed CWE-77
TI-2019-09446 CVE-2019-12650 · GHSA-w77v-9mp2-fhr5

Cisco IOS XE Software Web UI Command Injection Vulnerabilities

Priority MEDIUM 60

Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.26136 Published 2019-09-25 No fix listed CWE-77