Browse CVEs

MEDIUM 6.1 CVE-2016-6436 Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allow… Hostscan Engine Mitigation only Fix from $1,6002016-10-06 MEDIUM 6.1 CVE-2016-6425 Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express … Unified Contact Center Express Mitigation only Fix from $1,6002016-10-06 MEDIUM 6.1 CVE-2016-6418 Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to… Videoscape Distribution Suite Service Manager Mitigation only Fix from $1,6002016-10-05 MEDIUM 6.1 CVE-2016-6404 Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject… iOS Mitigation only Fix from $1,6002016-09-18 MEDIUM 5.4 CVE-2016-6395 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System S… Firesight System Software Mitigation only Fix from $1,6002016-09-12 MEDIUM 6.1 CVE-2016-1471 Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allow… Small Business 220 Series Smart Plus Switches No fix yet Fix from $1,6002016-09-02 MEDIUM 6.1 CVE-2016-6365 Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers… Secure Firewall Management Center Mitigation only Fix from $1,6002016-08-23 MEDIUM 6.1 CVE-2016-6359 Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devices allow… Transport Gateway Installation Software Mitigation only Fix from $1,6002016-08-22 MEDIUM 6.1 CVE-2016-1485 Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML … Identity Services Engine Software Mitigation only Fix from $1,6002016-08-22 MEDIUM 5.4 CVE-2016-1476 Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web … Ip Phone 8800 Series Firmware Mitigation only Fix from $1,6002016-08-22 MEDIUM 6.1 CVE-2016-1462 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to i… Prime Service Catalog Mitigation only Fix from $1,6002016-07-28 MEDIUM 6.1 CVE-2016-1451 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Meeting Server (formerly Acano Conferencing Server) 1.7 throu… Meeting Server Mitigation only Fix from $1,6002016-07-15 MEDIUM 6.1 CVE-2016-1449 Cross-site scripting (XSS) vulnerability in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via a craf… Webex Meetings Server Mitigation only Fix from $1,6002016-07-15 MEDIUM 6.1 CVE-2016-1447 Cross-site scripting (XSS) vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrar… Webex Meetings Server Mitigation only Fix from $1,6002016-07-15 MEDIUM 6.1 CVE-2016-1439 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.5(2) allows remote attacke… Unified Contact Center Enterprise Mitigation only Fix from $1,6002016-06-23 MEDIUM 6.1 CVE-2016-1396 Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices w… Rv130w Wireless N Multifunction Vpn Router Firmware Mitigation only Fix from $1,6002016-06-19 MEDIUM 6.1 CVE-2016-1431 Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to injec… Secure Firewall Management Center Mitigation only Fix from $1,6002016-06-18 MEDIUM 6.1 CVE-2016-1401 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote a… Unified Computing System Central Software Mitigation only Fix from $1,6002016-05-21 MEDIUM 6.1 CVE-2016-1377 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via un… Unity Connection No fix yet Fix from $1,6002016-04-12 MEDIUM 6.1 CVE-2016-1375 Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary we… Ip Interoperability And Collaboration System Mitigation only Fix from $1,6002016-04-08 MEDIUM 6.1 CVE-2016-1355 Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remo… Firesight System Software Mitigation only Fix from $1,6002016-03-03 MEDIUM 6.1 CVE-2016-1354 Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arb… Unified Communications Domain Manager Mitigation only Fix from $1,6002016-03-03 MEDIUM 6.1 CVE-2016-1318 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attacker… Application Policy Infrastructure Controller Enterprise Module Mitigation only Fix from $1,6002016-02-09 MEDIUM 6.1 CVE-2016-1309 Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or H… Webex Meetings Server Mitigation only Fix from $1,6002016-02-07 MEDIUM 6.1 CVE-2016-1305 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attacker… Application Policy Infrastructure Controller Enterprise Module Mitigation only Fix from $1,6002016-02-07 MEDIUM 6.1 CVE-2016-1311 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary… Jabber Guest Mitigation only Fix from $1,6002016-02-06 MEDIUM 6.1 CVE-2016-1304 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a … Unity Connection Mitigation only Fix from $1,6002016-01-30 MEDIUM 6.1 CVE-2016-1300 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML v… Unity Connection Mitigation only Fix from $1,6002016-01-27 MEDIUM 6.1 CVE-2016-1298 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attac… Unified Contact Center Express Mitigation only Fix from $1,6002016-01-26 MEDIUM 6.1 CVE-2015-6337 Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attac… Application Policy Infrastructure Controller Enterprise Module Mitigation only Fix from $1,6002016-01-26