Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2 - http://www.securitytracker.com/id/1037775 - http://www.securityfocus.com/bid/95944
CVE ID: CVE-2017-3823 State: PUBLISHED Published: 2017-02-01T11:00:00 Last Updated: 2024-08-05T14:39:40.444Z Vendors: n/a Products: Cisco WebEx browser extensions Problem Types: CWE-119 Description: An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class ActiveX control plugin before 10031.6.2017.0126 on Internet Explorer, and the Download Manager ActiveX control plugin before 2.1.0.10 on Internet Explorer. A vulnerability in these Cisco WebEx browser extensions could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected
xtensions could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the affected browser on an affected system. This vulnerability affects the browser extensions for Cisco WebEx Meetings Server and Cisco WebEx Centers (Meeting Center, Event Center, Training Center, and Support Center) when they are running on Microsoft Windows. The vulnerability is a design defect in an application programing interface (API) response parser within the extension. An attacker that can convince an affected user to visit an attacker-controlled web page or follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker c
follow an attacker-supplied link with an affected browser could exploit the vulnerability. If successful, the attacker could execute arbitrary code with the privileges of the affected browser. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1096 - https://0patch.blogspot.com/2017/01/micropatching-remote-code-execution-in.html - https://www.kb.cert.org/vuls/id/909240 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex - https://blog.filippo.io/webex-extension-vulnerability/ - http://www.securityfocus.com/bid/95737 - http://www.securitytracker.com/id/1037680 - https://bugs.chr
n-vulnerability/ - http://www.securityfocus.com/bid/95737 - http://www.securitytracker.com/id/1037680 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1100
CVE ID: CVE-2017-3824 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:41.076Z Vendors: n/a Products: Cisco IOS XE 15.x Problem Types: cause the device to reload Description: A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. More Information: CSCux40637. Known Affected Releases: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1). Additional Analyst Notes: -
s: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037774 - http://www.securityfocus.com/bid/95937 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-cbr
CVE ID: CVE-2017-3825 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T14:39:41.091Z Vendors: n/a Products: Cisco TelePresence Problem Types: CWE-20 Description: A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation for the size of a received ICMP packet. An attacker could exploit this vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit
is vulnerability by sending a crafted ICMP packet to the local IP address of the targeted endpoint. A successful exploit could allow the attacker to cause a DoS of the TelePresence endpoint, during which time calls could be dropped. This vulnerability would affect either IPv4 or IPv6 ICMP traffic. This vulnerability affects the following Cisco TelePresence products when running software release CE8.1.1, CE8.2.0, CE8.2.1, CE8.2.2, CE 8.3.0, or CE8.3.1: Spark Room OS, TelePresence DX Series, TelePresence MX Series, TelePresence SX Quick Set Series, TelePresence SX Series. Cisco Bug IDs: CSCvb95396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
co Bug IDs: CSCvb95396. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98293 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ctp - http://www.securitytracker.com/id/1038392
CVE ID: CVE-2017-3826 State: PUBLISHED Published: 2017-03-01T21:00:00 Last Updated: 2024-08-05T14:39:41.074Z Vendors: n/a Products: Cisco NetFlow Generation Appliance Problem Types: CWE-399 Description: A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) with software before 1.1(1a) could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service (DoS) condition. The vulnerability is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network tha
d on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network that is monitored by an NGA data port. SCTP packets addressed to the IP address of the NGA itself will not trigger this vulnerability. An exploit could allow the attacker to cause the appliance to become unresponsive or reload, causing a DoS condition. User interaction could be needed to recover the device using the reboot command from the CLI. The following Cisco NetFlow Generation Appliances are vulnerable: NGA 3140, NGA 3240, NGA 3340. Cisco Bug IDs: CSCvc83320. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037938 - http
83320. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037938 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-nga - http://www.securityfocus.com/bid/96509
CVE ID: CVE-2017-3827 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:40.935Z Vendors: n/a Products: Cisco AsyncOS Software for Cisco ESA and Cisco WSA Problem Types: Filtering Bypass Vulnerability Description: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA, both virtual and hardware appliances
r to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA, both virtual and hardware appliances, that are configured with message or content filters to scan incoming email attachments on the ESA or services scanning content of web access on the WSA. More Information: SCvb91473, CSCvc76500. Known Affected Releases: 10.0.0-203 9.9.9-894 WSA10.0.0-233. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96239 - http://www.securitytracker.com/id/1037831 - http://www.securitytracker.com/id/1037832 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-asyncos
CVE ID: CVE-2017-3828 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.483Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvb98777. Known Affected Releases: 11.0(1.10000.10) 11.5(1.10000.6). Known Fixed Releases: 11.0(1.23063.1) 11.5(1.12029.1) 11.5(1.12900.11) 11.5(1.12900.21) 11.6(1.10000.4) 1
.5(1.10000.6). Known Fixed Releases: 11.0(1.23063.1) 11.5(1.12029.1) 11.5(1.12900.11) 11.5(1.12900.21) 11.6(1.10000.4) 12.0(0.98000.156) 12.0(0.98000.178) 12.0(0.98000.369) 12.0(0.98000.470) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037839 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm1 - http://www.securityfocus.com/bid/96240
CVE ID: CVE-2017-3829 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.062Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc30999. Known Affected Releases: 12.0(0.98000.280). Known Fixed Releases: 11.0(1.23900.3) 12.0(0.98000.180) 12.0(0.98000.422) 12.0(0.98000.541) 12.0(0.98000.6). Additional
Known Fixed Releases: 11.0(1.23900.3) 12.0(0.98000.180) 12.0(0.98000.422) 12.0(0.98000.541) 12.0(0.98000.6). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm2 - http://www.securitytracker.com/id/1037839 - http://www.securityfocus.com/bid/96250
CVE ID: CVE-2017-3830 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:40.923Z Vendors: n/a Products: Cisco Meeting Server Problem Types: Denial of Service Vulnerability Description: A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance. More Information: CSCvc89678. Known Affected Releases: 2.1. Known Fixed Releases: 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96242 - http://www.securitytracker.com/id/1037833 - https://tools.cisco.com/security/center/content/CiscoSecuri
.com/bid/96242 - http://www.securitytracker.com/id/1037833 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms
CVE ID: CVE-2017-3831 State: PUBLISHED Published: 2017-03-15T20:00:00 Last Updated: 2024-08-05T14:39:41.294Z Vendors: n/a Products: Cisco Mobility Express 1800 Access Point Series Problem Types: CWE-264 Description: A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A success
ould exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96909 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800
CVE ID: CVE-2017-3832 State: PUBLISHED Published: 2017-04-06T18:00:00 Last Updated: 2024-08-05T14:39:41.292Z Vendors: n/a Products: Cisco Wireless LAN Controller Problem Types: CWE-264 Description: A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in
I web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3 - http://www.securityfocus.com/bid/97421 - http://www.securitytracker.com/id/1038184
CVE ID: CVE-2017-3833 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.310Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. More Information: CSCvb95951. Known Affected Releases: 12.0(0.99999.2). Known Fixed Releases: 11.0(1.23064.1) 11.5(1.12031.1) 11.5(1.12900.21) 11.5(1.12900.7) 11.5(1.12900.8) 11.6(1.10000.4) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.
(1.12031.1) 11.5(1.12900.21) 11.5(1.12900.7) 11.5(1.12900.8) 11.6(1.10000.4) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.98000.366) 12.0(0.98000.367) 12.0(0.98000.468) 12.0(0.98000.469) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucm - http://www.securityfocus.com/bid/96246
CVE ID: CVE-2017-3834 State: PUBLISHED Published: 2017-04-06T18:00:00 Last Updated: 2024-08-05T14:39:40.945Z Vendors: n/a Products: Cisco Aironet 1830 Series and 1850 Series Access Points Problem Types: CWE-255 Description: A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated, remote attacker to take complete control of an affected device. The vulnerability is due to the existence of default credentials for an affected device that is running Cisco Mobility Express Software, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker w
ware, regardless of whether the device is configured as a master, subordinate, or standalone access point. An attacker who has layer 3 connectivity to an affected device could use Secure Shell (SSH) to log in to the device with elevated privileges. A successful exploit could allow the attacker to take complete control of the device. This vulnerability affects Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points that are running an 8.2.x release of Cisco Mobility Express Software prior to Release 8.2.111.0, regardless of whether the device is configured as a master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software f
master, subordinate, or standalone access point. Release 8.2 was the first release of Cisco Mobility Express Software for next generation Cisco Aironet Access Points. Cisco Bug IDs: CSCva50691. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ame - http://www.securitytracker.com/id/1038181 - http://www.securityfocus.com/bid/97422
CVE ID: CVE-2017-3835 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.314Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: SQL Injection Vulnerability Description: A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access notices owned by other users, because of SQL Injection. More Information: CSCvb15627. Known Affected Releases: 1.4(0.908). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96249 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise - http://www.securitytrack
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ise - http://www.securitytracker.com/id/1037841
CVE ID: CVE-2017-3836 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:40.651Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.162) 12.0(0.98000.178) 12.0(0.98000.383) 12.0(0.98000.488) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.6). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96251
12.0(0.98500.6). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96251 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm3 - http://www.securitytracker.com/id/1037840
CVE ID: CVE-2017-3837 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.078Z Vendors: n/a Products: Cisco Meeting Server Problem Types: HTTP Packet Processing Vulnerability Description: An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, could allow an authenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. In addition, the attacker could potentially cause the application to crash unexpectedly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid sess
dly, resulting in a denial of service (DoS) condition. The attacker would need to be authenticated and have a valid session with the Web Bridge. Affected Products: This vulnerability affects Cisco Meeting Server software releases prior to 2.1.2. This product was previously known as Acano Conferencing Server. More Information: CSCvc89551. Known Affected Releases: 2.0 2.0.7 2.1. Known Fixed Releases: 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037834 - http://www.securityfocus.com/bid/96243 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cms1
CVE ID: CVE-2017-3838 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.069Z Vendors: n/a Products: Cisco Secure Access Control System Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected Releases: 5.8(2.5). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037835 - http://www.securityfocus.com/bid/96234 - https://tools.cisco.com/secu
ces: - http://www.securitytracker.com/id/1037835 - http://www.securityfocus.com/bid/96234 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs
CVE ID: CVE-2017-3839 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.127Z Vendors: n/a Products: Cisco Secure Access Control System Problem Types: XML External Entity Vulnerability Description: An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96236 - https://tools.cisco.com/security/center/content/CiscoSecu
tainer: References: - http://www.securityfocus.com/bid/96236 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs1 - http://www.securitytracker.com/id/1037836
CVE ID: CVE-2017-3840 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:40.730Z Vendors: n/a Products: Cisco Secure Access Control System Problem Types: Open Redirect Vulnerability Description: A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs2 - http://www.securitytracker.com/id/10378
cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs2 - http://www.securitytracker.com/id/1037837 - http://www.securityfocus.com/bid/96238
CVE ID: CVE-2017-3841 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.124Z Vendors: n/a Products: Cisco Secure Access Control System Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.8(2.5). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96237 - http://www.securitytracker.com/id/1037838 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201702
w.securitytracker.com/id/1037838 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-acs3
CVE ID: CVE-2017-3842 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.101Z Vendors: n/a Products: Cisco Intrusion Prevention System Device Manager Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. More Information: CSCuh91455. Known Affected Releases: 7.2(1)V7. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96256 - https://tools.cisco.com/security/center/content/CiscoSec