Unified Operations Manager (Cisco) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2013-09-12. Vendor: Cisco.
CVEs of Unified Operations Manager
- CVE-2013-5488 - CVSS 5 (medium), 2013-09-12: Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified…
- CVE-2013-3440 - CVSS 4.3 (medium), 2013-07-23: Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject…
- CVE-2013-3439 - CVSS 4.3 (medium), 2013-07-23: Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL…
- CVE-2013-3437 - CVSS 6.5 (medium), 2013-07-23: SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL…
- CVE-2013-3416 - CVSS 4.3 (medium), 2013-07-10: Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and…
- CVE-2011-2738 - CVSS 10 (critical), 2011-09-19: Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN…
- CVE-2011-0962 - CVSS 4.3 (medium), 2011-05-20: Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations…
- CVE-2011-0960 - CVSS 7.5 (high), 2011-05-20: Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1)…
- CVE-2011-0959 - CVSS 4.3 (medium), 2011-05-20: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web…
- CVE-2010-3036 - CVSS 10 (critical), 2010-10-29: Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers…
- CVE-2009-1161 - CVSS 10 (critical), 2009-05-21: Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified…