Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2022-01-14 CVE-2022-20641 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20642 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20643 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20644 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20645 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20646 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20647 Cross-site Scripting vulnerability in Cisco Security Manager
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface.
network
low complexity
cisco CWE-79
6.1
2022-01-14 CVE-2022-20658 Incorrect Resource Transfer Between Spheres vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM) could allow an authenticated, remote attacker to elevate their privileges to Administrator.
network
low complexity
cisco CWE-669
critical
9.6
2022-01-14 CVE-2022-20660 Cleartext Storage of Sensitive Information vulnerability in Cisco products
A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an affected device.
low complexity
cisco CWE-312
4.6
2022-01-11 CVE-2021-1573 Out-of-bounds Write vulnerability in Cisco Firepower Threat Defense
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition.
network
low complexity
cisco CWE-787
7.5