Vulnerabilities > Cisco > Socialminer > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-01-24 CVE-2019-1668 Cross-site Scripting vulnerability in Cisco Socialminer 11.6(1)/11.6(2)/12.0(1)
A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks against a user of the web-based user interface of an affected system.
network
low complexity
cisco CWE-79
6.1
2018-10-17 CVE-2018-15435 Cross-site Scripting vulnerability in Cisco Socialminer 11.6(1)
A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface.
network
low complexity
cisco CWE-79
6.1
2018-05-17 CVE-2018-0290 Unspecified vulnerability in Cisco Socialminer 11.6(1)
A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system.
network
low complexity
cisco
5.3
2017-07-04 CVE-2017-6702 Cross-site Scripting vulnerability in Cisco Socialminer 11.5(1)
A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system.
network
low complexity
cisco CWE-79
6.1