Vulnerabilities > Cisco > Virtual Managed Services

DATE CVE VULNERABILITY TITLE RISK
2018-02-22 CVE-2018-0130 Insecure Default Initialization of Resource vulnerability in Cisco Virtual Managed Services 3.0
A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system.
network
low complexity
cisco CWE-1188
7.5
2018-02-22 CVE-2018-0121 Improper Authentication vulnerability in Cisco products
A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system.
network
low complexity
cisco CWE-287
7.5