Browse CVEs

HIGH 10.0 CVE-2014-2198 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easie… Unified Cdm Platform Software after 4.4 Fix from $1,9502014-07-07 HIGH 9.0 CVE-2014-2197 The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 doe… Unified Cdm Application Software after 8.1 Fix from $1,9502014-07-07 MEDIUM 6.8 CVE-2014-3307 The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands vi… Universal Small Cell Series Firmware Mitigation only Fix from $1,6002014-07-02 MEDIUM 6.8 CVE-2014-3299 Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745. iOS Mitigation only Fix from $1,6002014-06-25 HIGH 7.1 CVE-2014-2176 Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (N… Ios Xr Mitigation only Fix from $1,9502014-06-14 MEDIUM 5.5 CVE-2014-3292 The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) rea… Unified Communications Manager Mitigation only Fix from $1,6002014-06-10 MEDIUM 5.7 CVE-2014-3291 Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a z… Wireless Lan Controller Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3278 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attack… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3281 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attack… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3286 The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sen… Webex Meetings Server Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.8 CVE-2014-3283 Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM)… Unified Communications Domain Manager after 9.0 Fix from $1,6002014-05-29 MEDIUM 5.0 CVE-2014-3279 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implem… Unified Communications Domain Manager after 9.0 Fix from $1,6002014-05-29 MEDIUM 5.0 CVE-2014-3285 Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint respons… Wide Area Application Services after 5.3 Fix from $1,6002014-05-29 HIGH 7.6 CVE-2014-3261 Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX… Unified Computing System 6120xp Fabric Interconnect Mitigation only Fix from $1,9502014-05-26 HIGH 9.3 CVE-2014-2196 Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t… Wide Area Application Services Mitigation only Fix from $1,9502014-05-26 HIGH 7.8 CVE-2014-2201 The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attacke… Nx Os after 6.2 Fix from $1,9502014-05-26 HIGH 7.1 CVE-2013-1191 Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to ga… Nx Os Mitigation only Fix from $1,9502014-05-26 HIGH 7.1 CVE-2014-2200 Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to ga… Nx Os Mitigation only Fix from $1,9502014-05-26 MEDIUM 6.8 CVE-2014-3267 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the … Security Manager after 4.6 Fix from $1,6002014-05-26 MEDIUM 6.5 CVE-2014-3275 SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated user… Identity Services Engine Software after 1.2 Fix from $1,6002014-05-26 MEDIUM 6.0 CVE-2014-3272 The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) paramet… Tidal Enterprise Scheduler after 6.1 Fix from $1,6002014-05-26 MEDIUM 6.1 CVE-2014-3284 Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malfor… Ios Xe Mitigation only Fix from $1,6002014-05-25 MEDIUM 6.8 CVE-2014-3269 The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID… Ios Xe Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.1 CVE-2014-3273 The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum962… iOS Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3268 Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and … iOS Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3270 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCu… Ios Xr Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3271 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSC… Ios Xr Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.8 CVE-2014-2194 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by inje… Unified Web And E Mail Interaction Manager Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.3 CVE-2014-3264 Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) v… Adaptive Security Appliance Software after 9.1 Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-2199 meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and ea… Webex Business Suite after 1.5 Fix from $1,6002014-05-20