Browse CVEs

HIGH 7.1 CVE-2013-3458 Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to caus… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-09-08 HIGH 9.3 CVE-2013-1115 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1116 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1117 Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1118 Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1119 Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remo… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 MEDIUM 6.8 CVE-2013-5471 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authen… Global Site Selector Mitigation only Fix from $1,6002013-09-05 MEDIUM 5.0 CVE-2013-5470 Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a … Secure Access Control System Mitigation only Fix from $1,6002013-09-04 MEDIUM 5.0 CVE-2013-3469 Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to… Mobility Services Engine Mitigation only Fix from $1,6002013-09-04 HIGH 7.1 CVE-2013-5469 The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote a… iOS Mitigation only Fix from $1,9502013-08-30 MEDIUM 6.3 CVE-2013-3474 The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device… Wireless Lan Controller Mitigation only Fix from $1,6002013-08-30 MEDIUM 5.0 CVE-2013-3470 The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID C… Ios Xr Mitigation only Fix from $1,6002013-08-30 HIGH 7.8 CVE-2013-3468 The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka… Unified Ip Phone 8945 Mitigation only Fix from $1,9502013-08-29 MEDIUM 6.8 CVE-2013-3472 Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote at… Unified Communications Manager Mitigation only Fix from $1,6002013-08-29 HIGH 9.3 CVE-2013-3466EPSS 5% The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled,… Secure Access Control Server after 4.2.1.15.10 Fix from $1,9502013-08-29 HIGH 8.5 CVE-2013-3462 Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and… Unified Communications Manager Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3387 Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service … Prime Central For Hosted Collaboration Solution Assurance Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3388 Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service … Prime Central For Hosted Collaboration Solution Assurance Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3389 Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service … Prime Central For Hosted Collaboration Solution Assurance Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3390 Memory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a den… Prime Central For Hosted Collaboration Solution Assurance Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3459 Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors, which allows remote attackers to cause a… Unified Communications Manager Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3460 Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remo… Unified Communications Manager Mitigation only Fix from $1,9502013-08-25 HIGH 7.1 CVE-2013-3461 Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SI… Unified Communications Manager Mitigation only Fix from $1,9502013-08-25 HIGH 7.8 CVE-2013-3453 Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allow… Unified Communications Manager after 8.6 Fix from $1,9502013-08-22 MEDIUM 5.0 CVE-2013-3455 Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732. Finesse Mitigation only Fix from $1,6002013-08-12 MEDIUM 5.0 CVE-2013-3457 Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request t… Finesse Mitigation only Fix from $1,6002013-08-12 HIGH 10.0 CVE-2013-3454 Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a def… Telepresence System Tx9000 after 1.10.1 Fix from $1,9502013-08-08 MEDIUM 6.8 CVE-2013-3450 Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attacke… Unified Communications Manager Mitigation only Fix from $1,6002013-08-05 MEDIUM 6.8 CVE-2013-3451 Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the … Unified Communications Manager Mitigation only Fix from $1,6002013-08-05 MEDIUM 5.8 CVE-2013-0149 The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, an… iOS Mitigation only Fix from $1,6002013-08-05