Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6347 1Cisco 1Secure Access Control Server May 6, 2026 Oct 30, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page.
CVE-2015-6346 1Cisco 1Secure Access Control Server May 6, 2026 Oct 30, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-6345 1Cisco 1Secure Access Control Server May 6, 2026 Oct 30, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700.
CVE-2015-6344 1Cisco 1Asa Cx Context Aware Security Software May 6, 2026 Oct 30, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an uns...Show more The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.Show less
CVE-2015-6340 1Cisco 1Asr 5000 Software May 6, 2026 Oct 27, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart) via a crafted header...Show more The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart) via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280.Show less
CVE-2015-6341 1Cisco 1Wireless Lan Controller Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cause a denial of service (client disconnection) via unspecified vectors, aka Bug I...Show more The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cause a denial of service (client disconnection) via unspecified vectors, aka Bug ID CSCuw10610.Show less
CVE-2015-6335 1Cisco 1Firesight System Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root v...Show more The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.Show less
CVE-2015-6327 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 be...Show more The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 before 9.2(4), and 9.3 before 9.3(3) allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets, aka Bug ID CSCus94026.Show less
CVE-2015-6326 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(...Show more Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(1.5) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCuu07799.Show less
CVE-2015-6325 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.4), 9.2 before 9.2(4), 9.3 before 9.3(...Show more Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.4), 9.2 before 9.2(4), 9.3 before 9.3(3.1), and 9.4 before 9.4(1.1) allows remote attackers to cause a denial of service (device reload) via a crafted DNS response, aka Bug ID CSCut03495.Show less
CVE-2015-6324 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Oct 25, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(2) allows remote attackers to caus...Show more The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9.2(4), 9.3 before 9.3(3.5), and 9.4 before 9.4(2) allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug IDs CSCus56252 and CSCus57142.Show less
CVE-2015-6334 1Cisco 1Asr 5000 Software May 6, 2026 Oct 16, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984.
CVE-2015-6333 1Cisco 1Application Policy Infrastructure Controller May 6, 2026 Oct 16, 2015 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.
CVE-2015-6332 1Cisco 1Prime Infrastructure May 6, 2026 Oct 13, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL renegotiation requests, aka Bug ID CSCuv56830.
CVE-2015-6328 1Cisco 1Prime Collaboration Assurance May 6, 2026 Oct 13, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380.
CVE-2015-6315 1Cisco 1Aironet Access Point Software May 6, 2026 Oct 13, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco Aironet 1850 access points with software 8.1(112.4) allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694.
CVE-2015-6331 1Cisco 1Prime Collaboration Assurance May 6, 2026 Oct 12, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887.
CVE-2015-6329 1Cisco 1Prime Collaboration Provisioning May 6, 2026 Oct 12, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074.
CVE-2015-6322 1Cisco 1Anyconnect Secure Mobility Client May 6, 2026 Oct 12, 2015 N/A· v4 N/A· v3 6.6 MEDIUM· v2 The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka...Show more The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.Show less
CVE-2015-6318 1Cisco 1Telepresence Video Communication Server Software May 6, 2026 Oct 12, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969.

Previous 1...211212213...329 Next