deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15499
Published: 2020-08-26
Description: An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440
CVE: CVE-2020-24312
Published: 2020-08-26
Description: mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/; https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/
CVE: CVE-2020-24313
Published: 2020-08-26
Description: Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/ultimate-appointment-scheduling/; https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/; https://wordpress.org/plugins/ultimate-appointment-scheduling/
CVE: CVE-2020-24314
Published: 2020-08-26
Description: Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/rss-feed-widget/advanced/; https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/; https://wordpress.org/plugins/rss-feed-widget/advanced/
CVE: CVE-2019-18847
Published: 2020-08-26
Description: Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://blogs.akamai.com/2020/08/enterprise-application-access-client-eaa-vulnerability-cve-2019-18847.html; https://blogs.akamai.com/sitr/; https://blogs.akamai.com/2020/08/enterprise-application-access-client-eaa-vulnerability-cve-2019-18847.html
CVE: CVE-2020-14498
Published: 2020-08-26
Description: HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03; https://www.hms-networks.com/cybersecurity/security-advisories; https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03
CVE: CVE-2020-19007
Published: 2020-08-26
Description: Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/halo-dev/halo/issues/547; https://github.com/halo-dev/halo/issues/547
CVE: CVE-2020-24007
Published: 2020-08-26
Description: Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://github.com/inflixim4be/Brute-Force-on-Umanni-RH; https://www.umanni.com.br/; https://github.com/inflixim4be/Brute-Force-on-Umanni-RH
CVE: CVE-2020-24008
Published: 2020-08-26
Description: Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/inflixim4be/User-Enumeration-on-Umanni-RH; https://www.umanni.com.br/; https://github.com/inflixim4be/User-Enumeration-on-Umanni-RH
CVE: CVE-2020-24315
Published: 2020-08-26
Description: Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://wordpress.org/plugins/cardoza-wordpress-poll/; https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/; https://wordpress.org/plugins/cardoza-wordpress-poll/
CVE: CVE-2020-24316
Published: 2020-08-26
Description: WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it back out to the user. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/admin-menu/; https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/; https://wordpress.org/plugins/admin-menu/
CVE: CVE-2020-13410
Published: 2020-08-26
Description: An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://cwe.mitre.org/data/definitions/248.html; https://github.com/moscajs/aedes/pull/493; https://payatu.com/advisory/dos-in-aedes-mqtt-broker
CVE: CVE-2020-15484
Published: 2020-08-26
Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system stores data in cleartext, without integrity protection against tampering.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor; https://www.niscomed.com/multipara-monitor.html; https://payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor
CVE: CVE-2020-16250
Published: 2020-08-26
Description: HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..
CVSS Score: 8.2 (HIGH)
CWE: CWE-290, CWE-345
References: http://packetstormsecurity.com/files/159478/Hashicorp-Vault-AWS-IAM-Integration-Authentication-Bypass.html; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151; https://www.hashicorp.com/blog/category/vault/
CVE: CVE-2020-16251
Published: 2020-08-26
Description: HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151; https://www.hashicorp.com/blog/category/vault/
CVE: CVE-2020-5912
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
CVSS Score: 7.1 (HIGH)
References: https://support.f5.com/csp/article/K12936322; https://support.f5.com/csp/article/K12936322
CVE: CVE-2020-5913
Published: 2020-08-26
Description: In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even when a valid CRL is present. This impacts SSL/TLS connections and may result in a man-in-the-middle attack on the connections.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://support.f5.com/csp/article/K72752002; https://support.f5.com/csp/article/K72752002
CVE: CVE-2020-5914
Published: 2020-08-26
Description: In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server cookie scenario may cause BD to restart under some circumstances.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K37466356; https://support.f5.com/csp/article/K37466356
CVE: CVE-2020-5915
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K57214921; https://support.f5.com/csp/article/K57214921
CVE: CVE-2020-5916
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://support.f5.com/csp/article/K29923912; https://support.f5.com/csp/article/K29923912
CVE: CVE-2020-5917
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2 and BIG-IQ versions 5.2.0-7.0.0, the host OpenSSH servers utilize keys of less than 2048 bits which are no longer considered secure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://support.f5.com/csp/article/K43404629; https://support.f5.com/csp/article/K43404629
CVE: CVE-2020-5918
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel (TMM) may stop responding when processing Stream Control Transmission Protocol (SCTP) traffic when traffic volume is high. This vulnerability affects TMM by way of a virtual server configured with an SCTP profile.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K26464312; https://support.f5.com/csp/article/K26464312
CVE: CVE-2020-5919
Published: 2020-08-26
Description: In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel (TMM) to stop responding.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K94563369; https://support.f5.com/csp/article/K94563369
CVE: CVE-2020-5920
Published: 2020-08-26
Description: In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://support.f5.com/csp/article/K25160703; https://support.f5.com/csp/article/K25160703
CVE: CVE-2020-5922
Published: 2020-08-26
Description: In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections for users which make use of Basic Authentication in a web browser.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://support.f5.com/csp/article/K20606443; https://support.f5.com/csp/article/K20606443
CVE: CVE-2020-5923
Published: 2020-08-26
Description: In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ versions 5.4.0-7.0.0, Self-IP port-lockdown bypass via IPv6 link-local addresses.
CVSS Score: 5.4 (MEDIUM)
References: https://support.f5.com/csp/article/K05975972; https://support.f5.com/csp/article/K05975972
CVE: CVE-2020-5924
Published: 2020-08-26
Description: In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for authentication is not set.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://support.f5.com/csp/article/K11400411; https://support.f5.com/csp/article/K11400411
CVE: CVE-2020-13821
Published: 2020-08-26
Description: An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker's JavaScript is loaded in a browser, which can lead to theft of the session and cookie of the administrator's account of the Broker.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://payatu.com/advisory/hivemq-mqtt-broker---xss-over-mqtt; https://www.hivemq.com/blog/hivemq-4-3-3-released/; https://payatu.com/advisory/hivemq-mqtt-broker---xss-over-mqtt
CVE: CVE-2020-15482
Published: 2020-08-26
Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-319
References: https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor; https://www.niscomed.com/multipara-monitor.html; https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor
CVE: CVE-2020-15483
Published: 2020-08-26
Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306
References: https://payatu.com/advisory/unauthenticated-uart-root-shell--in-niscomed-patient-monitor; https://www.niscomed.com/multipara-monitor.html; https://payatu.com/advisory/unauthenticated-uart-root-shell--in-niscomed-patient-monitor
CVE: CVE-2020-15486
Published: 2020-08-26
Description: An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved data can also be extracted over a Bluetooth connection. In addition, an attacker can launch a man-in-the-middle attack against data integrity.
CVSS Score: 6.5 (MEDIUM)
References: https://payatu.com/advisory/lack-of-bluetooth-le-encryption-and-access-control-in-dr-trust-ecg-or-ekg-pen; https://payatu.com/advisory/lack-of-bluetooth-le-encryption-and-access-control-in-dr-trust-ecg-or-ekg-pen
CVE: CVE-2020-24661
Published: 2020-08-26
Description: GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://gitlab.gnome.org/GNOME/geary/-/issues/866; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G7OTYTGND6EFOKNQJWCHKKXKSN7SM73Y/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS6CSTOBVO5HSAR3X5CT6DS6QDHXDB26/
CVE: CVE-2020-5921
Published: 2020-08-26
Description: in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two or more blades installed. Single-blade VIPRION hosts are not affected.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K00103216; https://support.f5.com/csp/article/K00103216
CVE: CVE-2020-5925
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel (TMM) to restart under some circumstances.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://support.f5.com/csp/article/K45421311; https://support.f5.com/csp/article/K45421311
CVE: CVE-2020-5926
Published: 2020-08-26
Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://support.f5.com/csp/article/K42830212; https://support.f5.com/csp/article/K42830212
CVE: CVE-2020-5927
Published: 2020-08-26
Description: In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K55873574; https://support.f5.com/csp/article/K55873574
CVE: CVE-2020-5928
Published: 2020-08-26
Description: In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be reused multiple times.
CVSS Score: 3.1 (LOW)
CWE: CWE-352
References: https://support.f5.com/csp/article/K40843345; https://support.f5.com/csp/article/K40843345
CVE: CVE-2020-23654
Published: 2020-08-26
Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NavigateCMS/Navigate-CMS/issues/10; https://github.com/NavigateCMS/Navigate-CMS/issues/10
CVE: CVE-2020-23655
Published: 2020-08-26
Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NavigateCMS/Navigate-CMS/issues/11; https://github.com/NavigateCMS/Navigate-CMS/issues/11
CVE: CVE-2020-23656
Published: 2020-08-26
Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NavigateCMS/Navigate-CMS/issues/12; https://github.com/NavigateCMS/Navigate-CMS/issues/12
CVE: CVE-2020-23657
Published: 2020-08-26
Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NavigateCMS/Navigate-CMS/issues/11; https://github.com/NavigateCMS/Navigate-CMS/issues/11
CVE: CVE-2020-3151
Published: 2020-08-26
Description: A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerability is due to insufficient security mechanisms in the restricted shell implementation. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to escape the restricted shell and execute a set of normally unauthorized commands with the privileges of a non-root user. To exploit this vulnerability, an attacker would need to have valid administrative credentials.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmx-rshell-esc-L6hBwjbg; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmx-rshell-esc-L6hBwjbg
CVE: CVE-2020-3152
Published: 2020-08-26
Description: A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to execute arbitrary commands with root privileges. The vulnerability is due to improper user permissions that are configured by default on an affected system. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, an attacker would need to have valid administrative credentials.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-275, CWE-276
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmx-prvesc-6g37hjAL; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmx-prvesc-6g37hjAL
CVE: CVE-2020-3389
Published: 2020-08-26
Description: A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An attacker could exploit this vulnerability by authenticating to an affected device and navigating to the directory that contains sensitive information. A successful exploit could allow the attacker to obtain sensitive information in clear text from the affected device.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-310, CWE-311
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-HYP-WSV-yT3j5hSB; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-HYP-WSV-yT3j5hSB
CVE: CVE-2020-3439
Published: 2020-08-26
Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-stored-w4rJZJtO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-stored-w4rJZJtO
CVE: CVE-2020-3440
Published: 2020-08-26
Description: A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attacker could exploit this vulnerability by persuading a user to follow a URL to a website that is designed to submit crafted input to the affected application. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system, possibly corrupting or deleting critical system files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-desktop-app-OVSfpVMj; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-desktop-app-OVSfpVMj