Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-6967 1Cisco 1Webex Sales Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CS...Show more Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020.Show less
CVE-2013-6965 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio...Show more The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183.Show less
CVE-2013-6964 1Cisco 1Webex Meeting Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197.
CVE-2013-6963 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207.
CVE-2013-6962 1Cisco 1Webex Meeting Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228.
CVE-2013-6961 1Cisco 1Webex Meeting Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul...Show more Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237.Show less
CVE-2013-6960 1Cisco 1Webex Meeting Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248.
CVE-2013-6959 1Cisco 1Webex Sales Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557.
CVE-2013-6711 1Cisco 1Webex Sales Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540.
CVE-2013-6710 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567.
CVE-2013-6709 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference b...Show more The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul57111.Show less
CVE-2013-7030 1Cisco 1Unified Communications Manager Apr 29, 2026 Dec 12, 2013 N/A· v4 7.3 HIGH· v3 5.0 MEDIUM· v2 The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseU...Show more The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly disputes the significance of this report, stating that this is an expected default behavior, and that the product's documentation describes use of the TFTP Encrypted Config option in addressing this issueShow less
CVE-2013-7043 1Cisco 4Scientific Atlanta Dpr/epr2320 Scientific Atlanta Dpr/epr2320 FirmwareScientific Atlanta Dpr2325+1 more Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 8.3 HIGH· v2 Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests...Show more Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via the Password parameter to goform/RgSecurity; (2) reboot the device via the Restart parameter to goform/restart; (3) modify Wi-Fi settings, as demonstrated by the WpaPreSharedKey parameter to goform/wlanSecurity; or (4) modify parental controls via the ParentalPassword parameter to goform/RgParentalBasic.Show less
CVE-2012-3047 1Cisco 37Scientific Atlanta Dpc/epc2100 Scientific Atlanta Dpc/epc2202Scientific Atlanta Dpc/epc2203+34 more Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-6708 1Cisco 1Cloud Portal Apr 29, 2026 Dec 10, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889.
CVE-2013-6707 1Cisco 1Adaptive Security Appliance Software Apr 29, 2026 Dec 7, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by maki...Show more Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.Show less
CVE-2013-6702 1Cisco 2Ons 15454 Ons 15454 Firmware Apr 29, 2026 Dec 4, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of service (card reset) via crafted packets, aka Bug ID CSCtz50902.
CVE-2013-6705 1Cisco 2Ios Ios Xe Apr 29, 2026 Dec 3, 2013 N/A· v4 N/A· v3 6.1 MEDIUM· v2 The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device reload) via a crafted sequence of ARP packets, aka Bug ID CSCuh38133.
CVE-2013-6704 1Cisco 1Ios Xe Apr 29, 2026 Dec 3, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty...Show more Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686.Show less
CVE-2013-6703 1Cisco 1Ons 15454 Apr 29, 2026 Dec 3, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2) SSLv3 packets, aka Bug ID CSCuh34787.

Previous 1...251252253...330 Next