Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Cisco Enterprise NFV Infrastructure Software n/a Clear all filters
TI-2019-01593 CVE-2019-1973 · GHSA-m7m6-q46f-vpq3

Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability

Priority LOW 24

A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-b…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00811 Published 2019-08-08 No fix listed CWE-79
TI-2019-01591 CVE-2019-1971 · GHSA-9fqx-8qp3-fpv5

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability

Priority MEDIUM 49

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root pri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03607 Published 2019-08-08 No fix listed CWE-78
TI-2019-01592 CVE-2019-1972 · GHSA-42w8-3c74-8cp2

Cisco Enterprise NFV Infrastructure Software Privilege Escalation Vulnerability

Priority LOW 32

A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges and execute arbitrary…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00503 Published 2019-08-08 No fix listed CWE-264