Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-4229 1Cisco 1Unified Communications Domain Manager May 6, 2026 Jun 30, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589.
CVE-2015-4227 1Cisco 1Headend System Release May 6, 2026 Jun 30, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838.
CVE-2015-4225 1Cisco 1Nx Os May 6, 2026 Jun 27, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive informa...Show more Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.Show less
CVE-2015-4199 1Cisco 1Ios May 6, 2026 Jun 27, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash)...Show more Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash) by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID CSCug47366.Show less
CVE-2015-4224 1Cisco 1Wireless Lan Controller Software May 6, 2026 Jun 26, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474.
CVE-2015-4222 1Cisco 1Unified Communications Manager Im And Presence Service May 6, 2026 Jun 26, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
CVE-2015-4221 1Cisco 1Unified Communications Manager Im And Presence Service May 6, 2026 Jun 26, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbit...Show more Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a decryption attack, aka Bug ID CSCuq46194.Show less
CVE-2015-4217 1Cisco 3Content Security Management Virtual Appliance Email Security Virtual ApplianceWeb Security Virtual Appliance May 6, 2026 Jun 26, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH hos...Show more The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601.Show less
CVE-2015-4216 1Cisco 3Content Security Management Virtual Appliance Email Security Virtual ApplianceWeb Security Virtual Appliance May 6, 2026 Jun 26, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH roo...Show more The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630.Show less
CVE-2015-4223 1Cisco 1Ios Xr May 6, 2026 Jun 25, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, aka Bug ID CSCuu77478.
CVE-2015-4220 1Cisco 1Unified Presence Server May 6, 2026 Jun 25, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773.
CVE-2015-4219 1Cisco 2Identity Services Engine Software Secure Access Control System May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated...Show more Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.Show less
CVE-2015-4218 1Cisco 1Jabber May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu...Show more The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information via a crafted value in a GET request, aka Bug IDs CSCuu65622 and CSCuu70858.Show less
CVE-2015-4215 1Cisco 1Wireless Lan Controller Software May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified...Show more Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.Show less
CVE-2015-4214 1Cisco 1Unified Meetingplace May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050.
CVE-2015-4213 1Cisco 1Nx Os May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391.
CVE-2015-4212 1Cisco 1Webex Meeting Center May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466.
CVE-2015-4211 1Cisco 1Anyconnect Secure Mobility Client May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.
CVE-2015-4208 1Cisco 1Webex Meeting Center May 6, 2026 Jun 24, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access...Show more Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398.Show less
CVE-2015-4210 1Cisco 1Webex Meeting Center May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.

Previous 1...219220221...329 Next