Show filters
424 Total Results
Displaying 411-420 of 424
Sort by:
Attacker Value
Unknown
CVE-2015-0666
Disclosure Date: April 03, 2015 (last updated October 05, 2023)
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
0
Attacker Value
Unknown
CVE-2014-3440
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to upload a log file.
0
Attacker Value
Unknown
CVE-2014-9225
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-9226
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-7289
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
0
Attacker Value
Unknown
CVE-2014-9224
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-3329
Disclosure Date: July 29, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
0
Attacker Value
Unknown
CVE-2013-5486
Disclosure Date: September 23, 2013 (last updated October 05, 2023)
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
0
Attacker Value
Unknown
CVE-2013-5490
Disclosure Date: September 23, 2013 (last updated October 05, 2023)
Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.
0
Attacker Value
Unknown
CVE-2013-5487
Disclosure Date: September 23, 2013 (last updated October 05, 2023)
DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029.
0
