Vulnerability index

Browse CVEs

111 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Identity Services Engine HIGH 7.3
CVE-2016-6453

A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary …

Mitigation only
Fix from $1,950 2016-11-03
Evolved Programmable Network Manager HIGH 8.8
CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remot…

Mitigation only
Fix from $1,950 2016-10-27
Secure Firewall Management Center HIGH 7.5
CVE-2016-6419

SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL comm…

Mitigation only
Fix from $1,950 2016-10-05
Webex Meetings Server HIGH 8.8
CVE-2016-1446

SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified ve…

Mitigation only
Fix from $1,950 2016-07-15
Prime Collaboration Deployment MEDIUM 6.5
CVE-2016-1437

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute ar…

Mitigation only
Fix from $1,600 2016-06-23
Cloud Network Automation Provisioner HIGH 7.1
CVE-2016-1393

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary S…

Mitigation only
Fix from $1,950 2016-05-12
Rv Series Router Firmware CRITICAL 9.8
CVE-2015-6319

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands v…

Mitigation only
Fix from $2,300 2016-01-27
Unified Communications Manager MEDIUM 6.5
CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL comm…

Mitigation only
Fix from $1,600 2016-01-08
Prime Service Catalog MEDIUM 6.5
CVE-2015-6350

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL comma…

No fix yet
Fix from $1,600 2015-10-30
Secure Access Control Server MEDIUM 6.5
CVE-2015-6345

SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute…

Mitigation only
Fix from $1,600 2015-10-30
Prime Collaboration Assurance MEDIUM 6.5
CVE-2015-6331

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrar…

Mitigation only
Fix from $1,600 2015-10-12
Prime Collaboration Provisioning MEDIUM 6.5
CVE-2015-6329

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL comman…

Mitigation only
Fix from $1,600 2015-10-12
Unity Connection MEDIUM 6.5
CVE-2015-6299

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrar…

Mitigation only
Fix from $1,600 2015-09-20
Unified Meetingplace MEDIUM 6.5
CVE-2015-4233

SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecifie…

Mitigation only
Fix from $1,600 2015-07-02
Unified Communications Manager Im And Presence Service MEDIUM 6.5
CVE-2015-4222

SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbit…

Mitigation only
Fix from $1,600 2015-06-26
Webex Meeting Center HIGH 7.5
CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive informat…

Mitigation only
Fix from $1,950 2015-06-24
Prime Collaboration MEDIUM 5.0
CVE-2015-4188

SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote attackers to execute arbitrary SQL commands v…

Mitigation only
Fix from $1,600 2015-06-17
Unity Connection MEDIUM 6.5
CVE-2015-0715

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated…

Mitigation only
Fix from $1,600 2015-05-07
Unified Communications Domain Manager MEDIUM 5.0
CVE-2015-0699

SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows r…

Mitigation only
Fix from $1,600 2015-04-15
Unified Communications Domain Manager MEDIUM 6.5
CVE-2015-0684

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users…

Mitigation only
Fix from $1,600 2015-04-03
Secure Access Control System MEDIUM 6.5
CVE-2015-0580

Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow…

Fix: after 5.5.0.46
Fix from $1,600 2015-02-12
Unified Communications Manager MEDIUM 6.5
CVE-2014-3366

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute …

Mitigation only
Fix from $1,600 2014-10-31
Asa HIGH 7.8
CVE-2014-3382

The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 befor…

Mitigation only
Fix from $1,950 2014-10-10
Unified Communications Domain Manager MEDIUM 6.5
CVE-2014-3339

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Se…

Mitigation only
Fix from $1,600 2014-08-12
Unity Connection MEDIUM 6.5
CVE-2014-3336

SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary …

Mitigation only
Fix from $1,600 2014-08-11
Security Manager MEDIUM 6.5
CVE-2014-3326

SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL com…

Mitigation only
Fix from $1,600 2014-07-26
Identity Services Engine Software MEDIUM 6.5
CVE-2014-3275

SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated user…

Fix: after 1.2
Fix from $1,600 2014-05-26
Unified Communications Manager HIGH 7.5
CVE-2014-0734

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10…

Fix: after 10.0
Fix from $1,950 2014-02-20
Unified Communications Manager HIGH 7.5
CVE-2014-0726

SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows rem…

Fix: after 10.0
Fix from $1,950 2014-02-13
Unified Communications Manager HIGH 7.5
CVE-2014-0727

SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remo…

Mitigation only
Fix from $1,950 2014-02-13