cisco intersight virtual appliance vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote malicious user to perform a command injection attack on an affected device. This vulnerability is due to insufficient input validation. An attacker cou...

Cisco Intersight Virtual Appliance

5.5

CVSSv2

Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote malicious user to conduct a path traversal or command injection attack on an affected system. These vulnerabilities are due to insufficient in...

Cisco Intersight Virtual Appliance

9

CVSSv2

Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote malicious user to conduct a path traversal or command injection attack on an affected system. These vulnerabilities are due to insufficient in...

Cisco Intersight Virtual Appliance

5.8

CVSSv2

Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent malicious user to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are re...

Cisco Intersight Virtual Appliance 1.0\\(1\\)

5.8

CVSSv2

Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent malicious user to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are re...

Cisco Intersight Virtual Appliance 1.0\\(1\\)

NA

A vulnerability in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent malicious user to access internal HTTP services that are otherwise inaccessible. This vulnerability is due to insufficient restrictions on internally accessible http proxies. An attacke...

Cisco Intersight Virtual Appliance

NA

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote malicious user to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these v...

Cisco Intersight Private Virtual Appliance 1.0.9

NA

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote malicious user to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these v...

Cisco Intersight Private Virtual Appliance 1.0.9

9.3

CVSSv2

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1160 Github repositories28 Articles

8.5

CVSSv2

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

34 Github repositories4 Articles

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook