Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6427 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through 11.0(1), allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuy75036 and CSCuy81654. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036953 - http://www.securityfocus.com/bid/93418 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-uc
.securityfocus.com/bid/93418 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ucis3
CVE ID: CVE-2016-6428 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-iosxr - http://www.securitytracker.com/id/1036956 - http://www.securityfocus.com/bid/93416
CVE ID: CVE-2016-6429 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.050Z Vendors: n/a Products: Cisco IP Interoperability and Collaboration System 4.10(1) Problem Types: unspecified Description: A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. More Information: CSCva47092. Known Affected Releases: 4.10(1). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics1 - http://www.securityfocus.com/bid/93915
CVE ID: CVE-2016-6430 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.141Z Vendors: n/a Products: Cisco IP Interoperability and Collaboration System before 5.0(1) Problem Types: unspecified Description: A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to elevate the privilege level associated with their session. More Information: CSCva38636. Known Affected Releases: 4.10(1). Known Fixed Releases: 5.0(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93919 - https://tools.cisco.com/security/center/cont
E Program Container: References: - http://www.securityfocus.com/bid/93919 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics2
CVE ID: CVE-2016-6431 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.028Z Vendors: n/a Products: Cisco ASA Software before 9.6(1.5) Problem Types: unspecified Description: A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker could exploit this vulnerability by sending a crafted enrollment request to the affected system. An exploit could allow the attacker to cause the reload of the affected system. Note: Only HTT
t to the affected system. An exploit could allow the attacker to cause the reload of the affected system. Note: Only HTTPS packets directed to the Cisco ASA interface, where the local CA is allowing user enrollment, can be used to trigger this vulnerability. This vulnerability affects systems configured in routed firewall mode and in single or multiple context mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93786 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-ca - http://www.securitytracker.com/id/1037060
CVE ID: CVE-2016-6432 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.113Z Vendors: n/a Products: Cisco ASA Software before 9.6(2.1) Problem Types: unspecified Description: A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could exploit this vulnerability by sending a crafted NetBIOS packet in response to a NetBIOS probe sent by the ASA software. An exploit could allow the attacker to execute arbitrary code and obtain full
a NetBIOS probe sent by the ASA software. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or cause a reload of the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 traffic. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw - http://www.securitytracker.com/id/1037059 - http://www.securityfocus.com/bid/9
rityAdvisory/cisco-sa-20161019-asa-idfw - http://www.securitytracker.com/id/1037059 - http://www.securityfocus.com/bid/93784
CVE ID: CVE-2016-6433 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872. Additional Analyst Notes: - CVE Program Container: References: - https://www.korelogic.com/Resources/Advisories/KL-001-2016-007.txt - http://www.securityfocus.com/bid/93414 - https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking - https://www.exploit-db.com/exploits/40463/ - https://www.exploit-db.c
com/blog/2016/10/10/virtual_appliance_spelunking - https://www.exploit-db.com/exploits/40463/ - https://www.exploit-db.com/exploits/41041/ - http://packetstormsecurity.com/files/140467/Cisco-Firepower-Management-Console-6.0-Post-Authentication-UserAdd.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc
CVE ID: CVE-2016-6434 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:19.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc1 - https://www.korelogic.com/Resources/Advisories/KL-001-2016-005.txt - https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking - http://www.securityfocus.com/bid/93412 - https:
ttps://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking - http://www.securityfocus.com/bid/93412 - https://www.exploit-db.com/exploits/40465/
CVE ID: CVE-2016-6435 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40464/ - https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt - https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking - http://www.securityfocus.com/bid/93421 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco
ng - http://www.securityfocus.com/bid/93421 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2
CVE ID: CVE-2016-6436 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:29:20.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93407 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-chs
CVE ID: CVE-2016-6437 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.155Z Vendors: n/a Products: Cisco Wide Area Application Services (WAAS) before 5.3(5g)1 and 6.x before 6.2(2.32) Problem Types: unspecified Description: A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32). Additional Analyst Notes: - CVE Program Cont
eleases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037002 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas - http://www.securityfocus.com/bid/93524
CVE ID: CVE-2016-6438 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.105Z Vendors: n/a Products: Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP Problem Types: unspecified Description: A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers: All 3.16S releases, All 3.17S releases, Release 3.18.0S, Release 3.18.1S, Release 3.18.0SP. More Information: CS
outers: All 3.16S releases, All 3.17S releases, Release 3.18.0S, Release 3.18.1S, Release 3.18.0SP. More Information: CSCuz62815. Known Affected Releases: 15.5(3)S2.9, 15.6(2)SP. Known Fixed Releases: 15.6(1.7)SP1, 16.4(0.183), 16.5(0.1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037003 - http://www.securityfocus.com/bid/93518 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-cbr-8
CVE ID: CVE-2016-6439 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.026Z Vendors: n/a Products: Cisco Firepower System Software before 6.0.1 Problem Types: unspecified Description: A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper handling of an HTTP packet stream. An attacker could exploit this vulnerability by sending a crafted HTTP packet stream to the detection engine on the targeted device. An exploit could al
ulnerability by sending a crafted HTTP packet stream to the detection engine on the targeted device. An exploit could allow the attacker to cause a DoS condition if the Snort process restarts and traffic inspection is bypassed or traffic is dropped. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-fpsnort - http://www.securitytracker.com/id/1037061 - http://www.securityfocus.com/bid/93787
CVE ID: CVE-2016-6440 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.087Z Vendors: n/a Products: Cisco Unified Communications Manager 11.0(1.10000.10), 11.5(1.10000.6), 11.5(0.99838.4) Problem Types: unspecified Description: The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to a clickjacking attack. More Information: CSCuz64683 CSCuz64698. Known Affected Releases: 11.0(1.10000.10), 11.5(1.10000.6), 11.5(0.99838.4). Known Fixed Releases: 11.0(1.22048.1), 11.5(0.98000.1070), 11.5(0.98000.284)11.5(0.98000.346), 11.5(0.98000.768), 11.5(1.10000.3), 11.5(1.1
s: 11.0(1.22048.1), 11.5(0.98000.1070), 11.5(0.98000.284)11.5(0.98000.346), 11.5(0.98000.768), 11.5(1.10000.3), 11.5(1.10000.6), 11.5(2.10000.2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037005 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-ucm - http://www.securityfocus.com/bid/93521
CVE ID: CVE-2016-6441 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.144Z Vendors: n/a Products: Cisco IOS XE 3.17 and 3.18 Problem Types: unspecified Description: A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known
3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-tl1 - http://www.securityfocus.com/bid/94072 - http://www.securitytracker.com/id/1037179
CVE ID: CVE-2016-6442 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.140Z Vendors: n/a Products: Cisco Finesse 11.0(1) Problem Types: unspecified Description: A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface. More Information: CSCvb57213. Known Affected Releases: 11.0(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037004 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-fin - http://www.securityfocus.co
ttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-fin - http://www.securityfocus.com/bid/93519
CVE ID: CVE-2016-6443 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.047Z Vendors: n/a Products: Cisco Prime Infrastructure and Evolved Programmable Network Manager 3.1(0.128), 1.2(400), 2.0(1.0.34A) Problem Types: unspecified Description: A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva27038, CSCva28335. Known Affected Releases: 3.1(0.128), 1.2(400), 2.0(1.0.34A). Additional Analyst Notes: - CVE Program Contai
CSCva28335. Known Affected Releases: 3.1(0.128), 1.2(400), 2.0(1.0.34A). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-prime - http://www.securityfocus.com/bid/93522 - http://www.securitytracker.com/id/1037006
CVE ID: CVE-2016-6444 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.058Z Vendors: n/a Products: Cisco Meeting Server 1.8, 1.9, 2.0 Problem Types: unspecified Description: A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93785 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms
CVE ID: CVE-2016-6445 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.015Z Vendors: n/a Products: Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 Problem Types: unspecified Description: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the syst
correctly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the system as another user. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-msc - http://www.securitytracker.com/id/1037000 - http://www.securityfocus.com/bid/93517
CVE ID: CVE-2016-6446 State: PUBLISHED Published: 2016-10-27T21:00:00 Last Updated: 2024-08-06T01:29:20.110Z Vendors: n/a Products: Cisco Meeting Server 1.8, 1.9, 2.0 Problem Types: unspecified Description: A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93782 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-cms1
CVE ID: CVE-2016-6447 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.152Z Vendors: n/a Products: Cisco Meeting Server before 2.0.1, Acano Server before 1.9.3, Cisco Meeting App before 1.9.8, Acano Meeting Apps before 1.8.35 Problem Types: unspecified Description: A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to 2.0.1, Acano Server releases prior to 1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More
1.8.16 and prior to 1.9.3, Cisco Meeting App releases prior to 1.9.8, Acano Meeting Apps releases prior to 1.8.35. More Information: CSCva75942 CSCvb67878. Known Affected Releases: 1.81.92.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms - http://www.securitytracker.com/id/1037180 - http://www.securityfocus.com/bid/94073
CVE ID: CVE-2016-6448 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.048Z Vendors: n/a Products: Cisco Meeting Server before 2.0.3 and Acano Server before 1.9.5 Problem Types: unspecified Description: A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This vulnerability affects the following products: Cisco Meeting Server releases prior to Release 2.0.3, Acano Server releases 1.9.x prior to Release 1.9.5, Acano Server releases 1.8.x prior to Release 1.8.17. More Information: CSCva76004. Known Affected Releases: 1.8.x 1.92.0.
cano Server releases 1.8.x prior to Release 1.8.17. More Information: CSCva76004. Known Affected Releases: 1.8.x 1.92.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-cms1 - http://www.securitytracker.com/id/1037181 - http://www.securityfocus.com/bid/94076
CVE ID: CVE-2016-6449 State: PUBLISHED Published: 2016-12-14T00:37:00 Last Updated: 2024-08-06T01:29:20.168Z Vendors: n/a Products: Cisco FireAMP Connector Endpoint software Problem Types: unspecified Description: A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial of service (DoS) condition, and certain security features could no longer be available. More Information: CSCvb40597. Known Affected Releases: 1. Additional Analyst Notes: - CVE Program Co
onger be available. More Information: CSCvb40597. Known Affected Releases: 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94814 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-fireamp
CVE ID: CVE-2016-6450 State: PUBLISHED Published: 2016-11-19T02:45:00 Last Updated: 2024-08-06T01:29:20.080Z Vendors: n/a Products: Cisco IOS XE 3.7(0) through Denali-16.3.1 Problem Types: unspecified Description: A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release of Cisco IOS XE Software: Cisco 5700 Series Wireless LAN Controllers, Cisco Catalyst 3650 Series Switches, Cisco Catalyst 3850 Series Switches, Cisco Catalyst 4500E Series Switches, Cisco Catalyst 4500X Ser
650 Series Switches, Cisco Catalyst 3850 Series Switches, Cisco Catalyst 4500E Series Switches, Cisco Catalyst 4500X Series Switches. More Information: CSCva60013 CSCvb22622. Known Affected Releases: 3.7(0) 16.4.1 Denali-16.1.3 Denali-16.2.2 Denali-16.3.1. Known Fixed Releases: 15.2(4)E3 16.1(2.208) 16.2(2.42) 16.3(1.22) 16.4(0.190) 16.5(0.29). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161115-iosxe - http://www.securityfocus.com/bid/94340 - http://www.securitytracker.com/id/1037299
CVE ID: CVE-2016-6451 State: PUBLISHED Published: 2016-11-03T21:00:00 Last Updated: 2024-08-06T01:29:20.150Z Vendors: n/a Products: Cisco Prime Collaboration Provisioning 10.6 Problem Types: unspecified Description: Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066 CSCut43736 CSCut43738 CSCut43741 CSCut43745 CSCut43748 CSCut43751 CSCut43756 CSCut43759 CSCut43764 CSCut43766. Known Affected Releases: 10.6. Additional Analyst Notes: - CVE Program Containe