Vulnerability index

Browse CVEs

455 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Hostscan Engine MEDIUM 6.1
CVE-2016-6436

Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allow…

Mitigation only
Fix from $1,600 2016-10-06
Unified Contact Center Express MEDIUM 6.1
CVE-2016-6425

Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express …

Mitigation only
Fix from $1,600 2016-10-06
Videoscape Distribution Suite Service Manager MEDIUM 6.1
CVE-2016-6418

Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to…

Mitigation only
Fix from $1,600 2016-10-05
iOS MEDIUM 6.1
CVE-2016-6404

Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject…

Mitigation only
Fix from $1,600 2016-09-18
Firesight System Software MEDIUM 5.4
CVE-2016-6395

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System S…

Mitigation only
Fix from $1,600 2016-09-12
Small Business 220 Series Smart Plus Switches MEDIUM 6.1
CVE-2016-1471

Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allow…

No fix yet
Fix from $1,600 2016-09-02
Secure Firewall Management Center MEDIUM 6.1
CVE-2016-6365

Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers…

Mitigation only
Fix from $1,600 2016-08-23
Transport Gateway Installation Software MEDIUM 6.1
CVE-2016-6359

Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allow…

Mitigation only
Fix from $1,600 2016-08-22
Identity Services Engine Software MEDIUM 6.1
CVE-2016-1485

Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML …

Mitigation only
Fix from $1,600 2016-08-22
Ip Phone 8800 Series Firmware MEDIUM 5.4
CVE-2016-1476

Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web …

Mitigation only
Fix from $1,600 2016-08-22
Prime Service Catalog MEDIUM 6.1
CVE-2016-1462

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to i…

Mitigation only
Fix from $1,600 2016-07-28
Meeting Server MEDIUM 6.1
CVE-2016-1451

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 throu…

Mitigation only
Fix from $1,600 2016-07-15
Webex Meetings Server MEDIUM 6.1
CVE-2016-1449

Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a craf…

Mitigation only
Fix from $1,600 2016-07-15
Webex Meetings Server MEDIUM 6.1
CVE-2016-1447

Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrar…

Mitigation only
Fix from $1,600 2016-07-15
Unified Contact Center Enterprise MEDIUM 6.1
CVE-2016-1439

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attacke…

Mitigation only
Fix from $1,600 2016-06-23
Rv130w Wireless N Multifunction Vpn Router Firmware MEDIUM 6.1
CVE-2016-1396

Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices w…

Mitigation only
Fix from $1,600 2016-06-19
Secure Firewall Management Center MEDIUM 6.1
CVE-2016-1431

Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to injec…

Mitigation only
Fix from $1,600 2016-06-18
Unified Computing System Central Software MEDIUM 6.1
CVE-2016-1401

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote a…

Mitigation only
Fix from $1,600 2016-05-21
Unity Connection MEDIUM 6.1
CVE-2016-1377

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via un…

No fix yet
Fix from $1,600 2016-04-12
Ip Interoperability And Collaboration System MEDIUM 6.1
CVE-2016-1375

Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary we…

Mitigation only
Fix from $1,600 2016-04-08
Firesight System Software MEDIUM 6.1
CVE-2016-1355

Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remo…

Mitigation only
Fix from $1,600 2016-03-03
Unified Communications Domain Manager MEDIUM 6.1
CVE-2016-1354

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arb…

Mitigation only
Fix from $1,600 2016-03-03
Application Policy Infrastructure Controller Enterprise Module MEDIUM 6.1
CVE-2016-1318

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attacker…

Mitigation only
Fix from $1,600 2016-02-09
Webex Meetings Server MEDIUM 6.1
CVE-2016-1309

Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or H…

Mitigation only
Fix from $1,600 2016-02-07
Application Policy Infrastructure Controller Enterprise Module MEDIUM 6.1
CVE-2016-1305

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attacker…

Mitigation only
Fix from $1,600 2016-02-07
Jabber Guest MEDIUM 6.1
CVE-2016-1311

Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary…

Mitigation only
Fix from $1,600 2016-02-06
Unity Connection MEDIUM 6.1
CVE-2016-1304

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a …

Mitigation only
Fix from $1,600 2016-01-30
Unity Connection MEDIUM 6.1
CVE-2016-1300

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML v…

Mitigation only
Fix from $1,600 2016-01-27
Unified Contact Center Express MEDIUM 6.1
CVE-2016-1298

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attac…

Mitigation only
Fix from $1,600 2016-01-26
Application Policy Infrastructure Controller Enterprise Module MEDIUM 6.1
CVE-2015-6337

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attac…

Mitigation only
Fix from $1,600 2016-01-26