Browse CVEs

HIGH 7.3 CVE-2016-6453 A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary … Identity Services Engine Mitigation only Fix from $1,9502016-11-03 HIGH 8.8 CVE-2016-6443 A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remot… Evolved Programmable Network Manager Mitigation only Fix from $1,9502016-10-27 HIGH 7.5 CVE-2016-6419 SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL comm… Secure Firewall Management Center Mitigation only Fix from $1,9502016-10-05 HIGH 8.8 CVE-2016-1446 SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified ve… Webex Meetings Server Mitigation only Fix from $1,9502016-07-15 MEDIUM 6.5 CVE-2016-1437 SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute ar… Prime Collaboration Deployment Mitigation only Fix from $1,6002016-06-23 HIGH 7.1 CVE-2016-1393 SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary S… Cloud Network Automation Provisioner Mitigation only Fix from $1,9502016-05-12 CRITICAL 9.8 CVE-2015-6319 SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands v… Rv Series Router Firmware Mitigation only Fix from $2,3002016-01-27 MEDIUM 6.5 CVE-2015-6433 SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL comm… Unified Communications Manager Mitigation only Fix from $1,6002016-01-08 MEDIUM 6.5 CVE-2015-6350 SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL comma… Prime Service Catalog No fix yet Fix from $1,6002015-10-30 MEDIUM 6.5 CVE-2015-6345 SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute… Secure Access Control Server Mitigation only Fix from $1,6002015-10-30 MEDIUM 6.5 CVE-2015-6331 SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrar… Prime Collaboration Assurance Mitigation only Fix from $1,6002015-10-12 MEDIUM 6.5 CVE-2015-6329 SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL comman… Prime Collaboration Provisioning Mitigation only Fix from $1,6002015-10-12 MEDIUM 6.5 CVE-2015-6299 SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrar… Unity Connection Mitigation only Fix from $1,6002015-09-20 MEDIUM 6.5 CVE-2015-4233 SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecifie… Unified Meetingplace Mitigation only Fix from $1,6002015-07-02 MEDIUM 6.5 CVE-2015-4222 SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbit… Unified Communications Manager Im And Presence Service Mitigation only Fix from $1,6002015-06-26 HIGH 7.5 CVE-2015-4208 Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive informat… Webex Meeting Center Mitigation only Fix from $1,9502015-06-24 MEDIUM 5.0 CVE-2015-4188 SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote attackers to execute arbitrary SQL commands v… Prime Collaboration Mitigation only Fix from $1,6002015-06-17 MEDIUM 6.5 CVE-2015-0715 SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated… Unity Connection Mitigation only Fix from $1,6002015-05-07 MEDIUM 5.0 CVE-2015-0699 SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows r… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-04-15 MEDIUM 6.5 CVE-2015-0684 SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.5 CVE-2015-0580 Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow… Secure Access Control System after 5.5.0.46 Fix from $1,6002015-02-12 MEDIUM 6.5 CVE-2014-3366 SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute … Unified Communications Manager Mitigation only Fix from $1,6002014-10-31 HIGH 7.8 CVE-2014-3382 The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 befor… Asa Mitigation only Fix from $1,9502014-10-10 MEDIUM 6.5 CVE-2014-3339 Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Se… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-08-12 MEDIUM 6.5 CVE-2014-3336 SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary … Unity Connection Mitigation only Fix from $1,6002014-08-11 MEDIUM 6.5 CVE-2014-3326 SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL com… Security Manager Mitigation only Fix from $1,6002014-07-26 MEDIUM 6.5 CVE-2014-3275 SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated user… Identity Services Engine Software after 1.2 Fix from $1,6002014-05-26 HIGH 7.5 CVE-2014-0734 SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10… Unified Communications Manager after 10.0 Fix from $1,9502014-02-20 HIGH 7.5 CVE-2014-0726 SQL injection vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) 10.0(1) and earlier allows rem… Unified Communications Manager after 10.0 Fix from $1,9502014-02-13 HIGH 7.5 CVE-2014-0727 SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remo… Unified Communications Manager Mitigation only Fix from $1,9502014-02-13