CVE-2022-20647
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
Vendor/product archive
cisco / security_manager CVEs
Beta · best-effort30 CVEs tagged to cisco / security_manager — 4 Critical, 2 High, 24 Medium, 0 Low, 0 Unrated.
CVE-2022-20646
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20645
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20644
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20643
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20642
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20641
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20640
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20639
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20638
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20637
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20636
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2022-20635
Published Jan 14, 2022Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks ag…
CVE-2020-27131
Published Nov 17, 2020Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2020-27130
Published Nov 17, 2020A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2020-27125
Published Nov 17, 2020A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insuff…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2019-12630
Published Oct 2, 2019A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected de…
CVE-2019-1903
Published Jun 20, 2019A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service (DoS) condition. The vulnera…
CVE-2018-0223
Published Mar 8, 2018A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site…
CVE-2015-0727
Published May 15, 2015Cross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0)SP1(1) allows remote attackers to inject arbitrary web script or HTML via a craft…
CVE-2015-0594
Published Feb 27, 2015Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, al…
CVE-2014-3326
Published Jul 26, 2014SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,…
CVE-2014-3267
Published May 26, 2014Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary us…
CVE-2014-3266
Published May 26, 2014Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspe…
CVE-2014-3265
Published May 20, 2014Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web sc…
Showing 1-25 of 30 CVEsPage 1 of 2