Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0668 State: PUBLISHED Published: 2015-03-20T01:00:00 Last Updated: 2024-08-06T04:17:32.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031968 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37934
CVE ID: CVE-2015-0669 State: PUBLISHED Published: 2015-03-21T01:00:00 Last Updated: 2024-08-06T04:17:32.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending crafted Autonomic Networking (AN) messages on an intranet network, aka Bug ID CSCup62167. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031967 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37935
CVE ID: CVE-2015-0670 State: PUBLISHED Published: 2015-03-21T01:00:00 Last Updated: 2024-08-06T04:17:32.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031969 - http://tools.cisco.com/security/center/viewAlert.x?alertId=37946
CVE ID: CVE-2015-0671 State: PUBLISHED Published: 2015-03-20T01:00:00 Last Updated: 2024-08-06T04:17:32.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of service (CPU consumption and network-resource consumption) via crafted packets, aka Bug ID CSCun15911. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=37947
CVE ID: CVE-2015-0672 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of crafted DHCP packets, aka Bug ID CSCup67822. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38006 - http://www.securitytracker.com/id/1031970
CVE ID: CVE-2015-0673 State: PUBLISHED Published: 2015-03-26T10:00:00 Last Updated: 2024-08-06T04:17:32.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38007 - http://www.securitytracker.com/id/1031971
CVE ID: CVE-2015-0674 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T04:17:32.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/viewAlert.x?alertId=38058
CVE ID: CVE-2015-0675 State: PUBLISHED Published: 2015-04-13T01:00:00 Last Updated: 2024-08-06T04:17:32.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrative control, by sending crafted UDP packets over the local network to the failover interface, aka Bug ID CSCur21069. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032045 - htt
r21069. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032045 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa
CVE ID: CVE-2015-0676 State: PUBLISHED Published: 2015-04-13T01:00:00 Last Updated: 2024-08-06T04:17:32.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655. Addi
age) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032045 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa
CVE ID: CVE-2015-0677 State: PUBLISHED Published: 2015-04-13T01:00:00 Last Updated: 2024-08-06T04:17:32.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032045 - http://tools.ci
tional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032045 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-asa
CVE ID: CVE-2015-0678 State: PUBLISHED Published: 2015-04-11T01:00:00 Last Updated: 2024-08-06T04:17:32.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032046 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-cxfp
CVE ID: CVE-2015-0679 State: PUBLISHED Published: 2015-03-28T01:00:00 Last Updated: 2024-08-06T04:17:32.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1031990 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38076
CVE ID: CVE-2015-0680 State: PUBLISHED Published: 2015-03-28T01:00:00 Last Updated: 2024-08-06T04:17:32.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38079 - http://www.securitytracker.com/id/1031991
CVE ID: CVE-2015-0681 State: PUBLISHED Published: 2015-07-24T16:00:00 Last Updated: 2024-08-06T04:17:32.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733. Additional
device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp/cvrf/cisco-sa-20150722-tftp_cvrf.xml - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp - http://www.securitytracker.com/id/1033023
CVE ID: CVE-2015-0682 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2024-08-06T04:17:32.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38113 - http://www.securitytracker.com/id/1032002
CVE ID: CVE-2015-0683 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2024-08-06T04:17:32.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032003 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38118
CVE ID: CVE-2015-0684 State: PUBLISHED Published: 2015-04-03T10:00:00 Last Updated: 2024-08-06T04:17:32.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032001 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38114
CVE ID: CVE-2015-0685 State: PUBLISHED Published: 2015-04-03T01:00:00 Last Updated: 2024-08-06T04:17:32.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38124 - http://www.securitytracker.com/id/1032004
CVE ID: CVE-2015-0686 State: PUBLISHED Published: 2015-04-03T01:00:00 Last Updated: 2024-08-06T04:17:32.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38193 - http://www.securitytracker.com/id/1032021
CVE ID: CVE-2015-0687 State: PUBLISHED Published: 2015-04-03T01:00:00 Last Updated: 2024-08-06T04:17:32.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows remote authenticated users to cause a denial of service (device crash) by performing SNMP polling, aka Bug ID CSCuq04574. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032022 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38194
CVE ID: CVE-2015-0688 State: PUBLISHED Published: 2015-04-04T01:00:00 Last Updated: 2024-08-06T04:17:32.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032023 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38210
CVE ID: CVE-2015-0689 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-06T04:17:32.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods, aka Bug ID CSCut69743. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/viewAlert.x?alertId=38221
CVE ID: CVE-2015-0690 State: PUBLISHED Published: 2015-04-07T01:00:00 Last Updated: 2024-08-06T04:17:32.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (WLC) devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38222 - http://www.securitytracker.com/id/1032024
CVE ID: CVE-2015-0691 State: PUBLISHED Published: 2015-04-17T01:00:00 Last Updated: 2024-08-06T04:17:32.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-csd - http://www.securitytracker.com/id/1032140
CVE ID: CVE-2015-0692 State: PUBLISHED Published: 2015-04-11T01:00:00 Last Updated: 2024-08-06T04:17:32.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38305 - http://www.securitytracker.com/id/1032097
CVE ID: CVE-2015-0693 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:17:32.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032097 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38306
CVE ID: CVE-2015-0694 State: PUBLISHED Published: 2015-04-11T01:00:00 Last Updated: 2024-08-06T04:17:32.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38292 - http://www.securitytracker.com/id/1032059
CVE ID: CVE-2015-0695 State: PUBLISHED Published: 2015-04-17T01:00:00 Last Updated: 2024-08-06T04:17:32.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032139 - http://www.securityfocus.com/bid/74162 - http://tools.cisco.com/security/center/c
//www.securitytracker.com/id/1032139 - http://www.securityfocus.com/bid/74162 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-iosxr
CVE ID: CVE-2015-0696 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:17:32.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38349 - http://www.securitytracker.com/id/1032137
CVE ID: CVE-2015-0697 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:17:32.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032136 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38350
CVE ID: CVE-2015-0698 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:17:32.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032135 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38351
CVE ID: CVE-2015-0699 State: PUBLISHED Published: 2015-04-15T10:00:00 Last Updated: 2024-08-06T04:17:32.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032134 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38366
CVE ID: CVE-2015-0700 State: PUBLISHED Published: 2015-04-17T01:00:00 Last Updated: 2024-08-06T04:17:32.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032163 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38403
CVE ID: CVE-2015-0701 State: PUBLISHED Published: 2015-05-07T01:00:00 Last Updated: 2024-08-06T04:17:32.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74491 - http://www.securitytracker.com/id/1032267 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150506-ucsc
CVE ID: CVE-2015-0702 State: PUBLISHED Published: 2015-04-21T00:00:00 Last Updated: 2024-08-06T04:17:32.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38455 - http://www.securitytracker.com/id/1032165
CVE ID: CVE-2015-0703 State: PUBLISHED Published: 2015-04-21T00:00:00 Last Updated: 2024-08-06T04:17:32.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032164 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38459
CVE ID: CVE-2015-0704 State: PUBLISHED Published: 2015-04-22T01:00:00 Last Updated: 2024-08-06T04:17:32.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=38460 - http://www.securitytracker.com/id/1032334
CVE ID: CVE-2015-0705 State: PUBLISHED Published: 2015-04-22T01:00:00 Last Updated: 2024-08-06T04:17:32.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74258 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://tools.cisco.com/security/center/viewAlert
.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://tools.cisco.com/security/center/viewAlert.x?alertId=38461 - http://www.securitytracker.com/id/1032335