cisco elastic services controller vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote malicious user to gain full access to the affected system. The vulnerability is due to static, default credentials for the Cisco ESC UI that are shared between ...

Cisco Elastic Services Controller 2.0 Cisco Elastic Services Controller 1.1.0 Cisco Elastic Services Controller 2.2.0 Cisco Elastic Services Controller 1.0.0 Cisco Elastic Services Controller 2.3.0 Cisco Elastic Services Controller 2.1.0

9

CVSSv2

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote malicious user to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a "tomcat" user on the system can run ce...

Cisco Elastic Services Controller 2.3.0 Cisco Elastic Services Controller 2.0 Cisco Elastic Services Controller 1.0.0 Cisco Elastic Services Controller 2.1.0 Cisco Elastic Services Controller 1.1.0 Cisco Elastic Services Controller 2.2.0

4

CVSSv2

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote malicious user to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could ...

Cisco Elastic Services Controller 2.3\\(2\\)Cisco Elastic Services Controller 2.3

4.3

CVSSv2

A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web interface. The vulnerability is due to insufficient validation of user-su...

Cisco Elastic Services Controller 2.3\\(1\\)Cisco Elastic Services Controller 2.2\\(9.76\\)

2.1

CVSSv2

A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local malicious user to access information stored in the file system of an affected system, aka Unauthorized Directory Access. More Information: CSCvd76286. Known Aff...

Cisco Elastic Services Controller 2.2\\(9.76\\)Cisco Elastic Services Controller 2.3\\(1\\)

4.6

CVSSv2

A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged malicious user to access sensitive information, including credentials for system accounts, on an affected system. The vulnerability is due to improper protection of sensitive lo...

Cisco Elastic Services Controller 2.2\\(9.76\\)

4

CVSSv2

A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote malicious user to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to t...

Cisco Elastic Services Controller 2.3\\(2\\)

2.1

CVSSv2

A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local malicious user to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit ...

Cisco Elastic Services Controller

9

CVSSv2

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote malicious user to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0.

Cisco Elastic Services Controller 21.0.0

4

CVSSv2

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote malicious user to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2).

Cisco Elastic Services Controller 2.3\\(2\\)

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook