Browse CVEs

HIGH 7.5 CVE-2016-9210 A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remo… Unified Communications Manager Mitigation only Fix from $1,9502016-12-14 MEDIUM 6.5 CVE-2016-9208 A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow a… Emergency Responder Mitigation only Fix from $1,6002016-12-14 MEDIUM 6.5 CVE-2016-9199 A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files o… Iox Mitigation only Fix from $1,6002016-12-14 HIGH 7.5 CVE-2016-6371 Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote … Hosted Collaboration Mediation Fulfillment Mitigation only Fix from $1,9502016-09-12 HIGH 7.5 CVE-2016-1429EPSS 7% Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafte… Rv180 Vpn Router Firmware Mitigation only Fix from $1,9502016-08-08 MEDIUM 6.5 CVE-2016-1434 The license-certificate upload functionality on Cisco 8800 phones with software 11.0(1) allows remote authenticated users to delete arbitrary files v… Ip Phone 8800 Series Firmware Mitigation only Fix from $1,6002016-06-23 MEDIUM 6.4 CVE-2015-4289 Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002015-08-01 HIGH 7.5 CVE-2015-0666 KEVEPSS 40% Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to … Prime Data Center Network Manager after 7.0 Fix from $1,9502015-04-03 MEDIUM 6.6 CVE-2015-0665 The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC… Anyconnect Secure Mobility Client after 4.0 Fix from $1,6002015-03-17 MEDIUM 5.0 CVE-2014-8019 Directory traversal vulnerability in Cisco Enterprise Content Delivery System (ECDS) allows remote attackers to read arbitrary files via a crafted UR… Enterprise Content Delivery System Mitigation only Fix from $1,6002014-12-20 MEDIUM 6.8 CVE-2014-3319 Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remote authenti… Unified Communications Manager Mitigation only Fix from $1,6002014-07-14 MEDIUM 5.5 CVE-2014-3317 Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0… Unified Communications Manager Mitigation only Fix from $1,6002014-07-14 MEDIUM 6.3 CVE-2013-6688 Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications M… Unified Communications Manager after 9.1 Fix from $1,6002013-11-18 HIGH 7.5 CVE-2013-5554 Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services (WAAS) Mobile before 3.5.5 al… Wide Area Application Services Mobile after 3.5.4 Fix from $1,9502013-11-08 MEDIUM 6.6 CVE-2012-4104 Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allo… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 5.0 CVE-2013-3457 Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request t… Finesse Mitigation only Fix from $1,6002013-08-12 HIGH 7.8 CVE-2013-3429EPSS 10% Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a… Video Surveillance Manager after 6.3.3 Fix from $1,9502013-07-25 HIGH 7.8 CVE-2013-1224 Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote atta… Unified Customer Voice Portal after 9.0 Fix from $1,9502013-05-09 MEDIUM 5.0 CVE-2013-1156 Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a craf… Prime Central For Hosted Collaboration Solution Mitigation only Fix from $1,6002013-05-01 HIGH 7.1 CVE-2013-1167 Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled… Ios Xe Mitigation only Fix from $1,9502013-04-11 HIGH 9.0 CVE-2012-0365 Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-… Small Business Srp520 Series Firmware after 1.01.24 Fix from $1,9502012-02-25 HIGH 7.8 CVE-2011-3315EPSS 26% Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before … Unified Ip Interactive Voice Response Mitigation only Fix from $1,9502011-10-27 HIGH 7.8 CVE-2011-3305EPSS 22% Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted … Nac Manager Mitigation only Fix from $1,9502011-10-06 MEDIUM 6.8 CVE-2011-0966EPSS 41% Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows r… Ciscoworks Common Services after 3.3 Fix from $1,6002011-05-20 MEDIUM 6.5 CVE-2011-1607 Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su… Unified Communications Manager Mitigation only Fix from $1,6002011-05-03 HIGH 7.8 CVE-2010-1577 Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.… Internet Streamer Patch available Fix from $1,9502010-07-28 HIGH 7.8 CVE-2010-1571 Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecifie… Unified Contact Center Express Patch available Fix from $1,9502010-06-10 MEDIUM 6.8 CVE-2010-0146 Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files vi… Security Agent Patch available Fix from $1,6002010-02-23 HIGH 9.0 CVE-2009-2047 Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Conta… Crs Patch available Fix from $1,9502009-07-16 HIGH 10.0 CVE-2009-1161EPSS 13% Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Uni… Ciscoworks Common Services Patch available Fix from $1,9502009-05-21