Browse CVEs

MEDIUM 6.1 CVE-2015-0708 Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_N… Ios Xe Mitigation only Fix from $1,6002015-04-29 MEDIUM 5.8 CVE-2015-0706 Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to … Firesight System Software Mitigation only Fix from $1,6002015-04-23 MEDIUM 6.8 CVE-2015-0705 Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows… Unified Meetingplace Mitigation only Fix from $1,6002015-04-22 MEDIUM 6.8 CVE-2015-0704 Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack th… Unified Meetingplace Mitigation only Fix from $1,6002015-04-22 HIGH 9.0 CVE-2015-0702 Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated… Unified Meetingplace Mitigation only Fix from $1,9502015-04-21 MEDIUM 6.8 CVE-2015-0700 Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solu… Secure Access Control Server Solution Engine Mitigation only Fix from $1,6002015-04-17 HIGH 7.8 CVE-2015-0695 Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual int… Ios Xr Mitigation only Fix from $1,9502015-04-17 HIGH 9.3 CVE-2015-0691 A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a … Secure Desktop Mitigation only Fix from $1,9502015-04-17 MEDIUM 5.0 CVE-2015-0699 SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows r… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-04-15 MEDIUM 5.8 CVE-2015-0697 Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Ro… Telepresence Tc Software Mitigation only Fix from $1,6002015-04-15 HIGH 7.2 CVE-2015-0693 Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel… Web Security Appliance Mitigation only Fix from $1,9502015-04-15 HIGH 7.8 CVE-2015-0677 The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6… Adaptive Security Appliance Software Mitigation only Fix from $1,9502015-04-13 HIGH 7.1 CVE-2015-0676 The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 befo… Adaptive Security Appliance Software Mitigation only Fix from $1,9502015-04-13 HIGH 8.3 CVE-2015-0675 The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) d… Adaptive Security Appliance Software Mitigation only Fix from $1,9502015-04-13 MEDIUM 5.0 CVE-2015-0694 Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attacker… Ios Xr Mitigation only Fix from $1,6002015-04-11 HIGH 7.2 CVE-2015-0692 Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel… Web Security Appliance Mitigation only Fix from $1,9502015-04-11 HIGH 7.8 CVE-2015-0678 The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9… Asa With Firepower Services Mitigation only Fix from $1,9502015-04-11 HIGH 7.1 CVE-2015-0688 Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a … Ios Xe Mitigation only Fix from $1,9502015-04-04 HIGH 7.1 CVE-2015-0616 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2… Unity Connection Mitigation only Fix from $1,9502015-04-03 HIGH 7.1 CVE-2015-0615 The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)… Unity Connection Mitigation only Fix from $1,9502015-04-03 HIGH 7.1 CVE-2015-0614 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2… Unity Connection Mitigation only Fix from $1,9502015-04-03 HIGH 7.1 CVE-2015-0613 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2… Unity Connection Mitigation only Fix from $1,9502015-04-03 HIGH 7.1 CVE-2015-0612 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2… Unity Connection Mitigation only Fix from $1,9502015-04-03 MEDIUM 6.5 CVE-2015-0684 SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.5 CVE-2015-0682 Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka B… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.3 CVE-2015-0686 The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote aut… Nx Os Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.3 CVE-2015-0687 The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows rem… iOS Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.1 CVE-2015-0679 The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a deni… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-03-28 HIGH 7.9 CVE-2015-0658 The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which a… Nx Os Mitigation only Fix from $1,9502015-03-28 MEDIUM 5.0 CVE-2015-0672 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of craf… Ios Xr Mitigation only Fix from $1,6002015-03-26