Vulnerabilities > Cisco > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-06-16 CVE-2021-1568 Unspecified vulnerability in Cisco Anyconnect Secure Mobility Client
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.
local
low complexity
cisco
5.5
2021-06-16 CVE-2021-1569 Improper Input Validation vulnerability in Cisco Jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
6.5
2021-06-16 CVE-2021-1570 Improper Input Validation vulnerability in Cisco Jabber
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
6.5
2021-06-16 CVE-2021-1571 Cross-site Scripting vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
network
low complexity
cisco CWE-79
6.1
2021-06-04 CVE-2021-1517 Unspecified vulnerability in Cisco Webex Meetings Server
A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections.
network
low complexity
cisco
4.3
2021-06-04 CVE-2021-1525 Unspecified vulnerability in Cisco Webex Meetings Server
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file.
network
low complexity
cisco
6.1
2021-06-04 CVE-2021-1527 Out-of-bounds Write vulnerability in Cisco Webex Player 3.0/4.0
A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application.
local
low complexity
cisco CWE-787
6.1
2021-06-04 CVE-2021-1537 Unspecified vulnerability in Cisco Thousandeyes Recorder 1.0.3
A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software.
local
low complexity
cisco
5.5
2021-06-04 CVE-2021-1544 Unspecified vulnerability in Cisco Webex Meetings
A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information.
local
low complexity
cisco
5.5
2021-06-04 CVE-2021-1563 Memory Leak vulnerability in Cisco products
Multiple vulnerabilities in the implementation of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service (DoS) condition on an affected device.
low complexity
cisco CWE-401
6.5