Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2017-05-22 CVE-2017-6649 Improper Input Validation vulnerability in Cisco Nx-Os
A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack.
local
low complexity
cisco CWE-20
4.6
2017-05-22 CVE-2017-6647 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6646 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6645 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Temporary Directory information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6644 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6643 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6642 Information Exposure vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system.
network
low complexity
cisco CWE-200
5.0
2017-05-22 CVE-2017-6641 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Remote Expert Manager 11.0.0
A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service (DoS) condition on an affected system.
network
low complexity
cisco CWE-770
7.8
2017-05-22 CVE-2017-6637 Improper Input Validation vulnerability in Cisco Prime Collaboration Provisioning
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file from an affected system.
network
low complexity
cisco CWE-20
4.0
2017-05-22 CVE-2017-6636 Path Traversal vulnerability in Cisco Prime Collaboration Provisioning
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on an affected system.
network
low complexity
cisco CWE-22
4.0