Browse CVEs

MEDIUM 6.6 CVE-2013-3399 Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vect… Desktop Collaboration Experience Mitigation only Fix from $1,6002013-07-02 HIGH 9.0 CVE-2013-3384 The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email… Ironport Asyncos after 7.1.3 Fix from $1,9502013-06-27 HIGH 7.8 CVE-2013-3385 The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 b… Ironport Asyncos after 7.1.3 Fix from $1,9502013-06-27 HIGH 7.8 CVE-2013-3386 The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and … Ironport Asyncos after 7.1.5 Fix from $1,9502013-06-27 HIGH 9.0 CVE-2013-3383 The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows… Ironport Asyncos after 7.1.3 Fix from $1,9502013-06-27 MEDIUM 6.8 CVE-2013-3397 Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote … Unified Communications Manager Mitigation only Fix from $1,6002013-06-26 MEDIUM 5.0 CVE-2013-3398 The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pat… Prime Central For Hosted Collaboration Solution Mitigation only Fix from $1,6002013-06-26 HIGH 7.8 CVE-2013-3382 The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive … Adaptive Security Appliance Mitigation only Fix from $1,9502013-06-26 MEDIUM 5.0 CVE-2013-3393 The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a … Jabber Mitigation only Fix from $1,6002013-06-26 HIGH 8.3 CVE-2013-3379 The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote… Telepresence Tc Software after 4.1.2 Fix from $1,9502013-06-21 HIGH 7.8 CVE-2013-3377 Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via craf… Telepresence Tc Software after 5.1.6 Fix from $1,9502013-06-21 HIGH 7.8 CVE-2013-3378 Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) vi… Telepresence Tc Software after 6.0.1 Fix from $1,9502013-06-21 MEDIUM 5.4 CVE-2013-1203 Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear… Asa Cx Context Aware Security Software Mitigation only Fix from $1,6002013-06-18 MEDIUM 5.0 CVE-2013-3381 Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on p… Hosted Collaboration Solution Mitigation only Fix from $1,6002013-06-12 MEDIUM 6.8 CVE-2013-1246 Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of s… Telepresence System Software Mitigation only Fix from $1,6002013-05-31 MEDIUM 5.8 CVE-2013-1212 The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoo… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.4 CVE-2013-1210 Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enable… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.0 CVE-2013-1209 The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Ne… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.0 CVE-2013-1211 Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communica… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.0 CVE-2013-1213 Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.8 CVE-2013-1208 The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (V… Nx Os Mitigation only Fix from $1,6002013-05-29 MEDIUM 5.8 CVE-2012-6399 Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th… Webex Mitigation only Fix from $1,6002013-05-27 MEDIUM 5.0 CVE-2013-1204 Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumption or process reload) by sendin… Ios Xr Mitigation only Fix from $1,6002013-05-23 HIGH 7.8 CVE-2013-1236 Cisco TelePresence Supervisor MSE 8050 before 2.3(1.31) allows remote attackers to cause a denial of service (CPU consumption or device reload) by es… Telepresence Supervisor Mse 8050 Software after 2.2 Fix from $1,9502013-05-16 MEDIUM 6.8 CVE-2013-1200 Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, ak… Secure Access Control System Mitigation only Fix from $1,6002013-05-16 MEDIUM 5.0 CVE-2013-1188 Cisco Unified Communications Manager (CUCM) does not properly limit the rate of authentication attempts, which allows remote attackers to cause a den… Unified Communications Manager Mitigation only Fix from $1,6002013-05-16 MEDIUM 5.0 CVE-2013-1242 Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to cause a denial of service (memory consumpti… Unified Presence Server Mitigation only Fix from $1,6002013-05-10 HIGH 10.0 CVE-2013-1221 The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat compone… Unified Customer Voice Portal after 9.0 Fix from $1,9502013-05-09 HIGH 7.8 CVE-2013-1220 The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial of servic… Unified Customer Voice Portal after 9.0 Fix from $1,9502013-05-09 HIGH 7.8 CVE-2013-1222 The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat compone… Unified Customer Voice Portal after 9.0 Fix from $1,9502013-05-09