Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stored xss vulnerabilities and exploits
(subscribe to this query)
4.8
CVSSv3
CVE-2020-3464
A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based...
Cisco Ucs Director
5.3
CVSSv3
CVE-2019-8292
Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.
Online Store System Project Online Store System 1.0
5.4
CVSSv3
CVE-2023-20096
A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote malicious user to perform a stored cross-site scripting (XSS) attack. This vulnerability is due to insufficient input validation of use...
Cisco Unified Contact Center Express
5.4
CVSSv3
CVE-2024-20251
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote malicious user to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists...
Cisco Identity Services Engine 1.4\\(0.253\\)
Cisco Identity Services Engine 2.0\\(0.169\\)
Cisco Identity Services Engine 1.3\\(120.135\\)
Cisco Identity Services Engine 2.0\\(0.222\\)
Cisco Identity Services Engine 2.1\\(102.101\\)
Cisco Identity Services Engine 2.1\\(0.800\\)
Cisco Identity Services Engine 2.1\\(0.474\\)
Cisco Identity Services Engine 1.4\\(0.181\\)
Cisco Identity Services Engine 1.4\\(0.908\\)
Cisco Identity Services Engine 1.2\\(1.199\\)
Cisco Identity Services Engine 2.2\\(0.283\\)
Cisco Identity Services Engine 2.0\\(0.147\\)
Cisco Identity Services Engine 1.3\\(106.146\\)
Cisco Identity Services Engine 1.3\\(0.876\\)
Cisco Identity Services Engine 2.3\\(0.151\\)
Cisco Identity Services Engine 2.0\\(1.130\\)
Cisco Identity Services Engine 1.4\\(0.109\\)
Cisco Identity Services Engine 1.3\\(0.722\\)
Cisco Identity Services Engine 1.3\\(0.909\\)
Cisco Identity Services Engine 1.4
Cisco Identity Services Engine 2.0
Cisco Identity Services Engine 2.0.1
5.4
CVSSv3
CVE-2022-20781
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. ...
Cisco Asyncos
5.4
CVSSv3
CVE-2019-1777
A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient validation of user-...
Cisco Registered Envelope Service 5.3.4-027
5.4
CVSSv3
CVE-2020-3185
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to ...
Cisco Telepresence Management Suite
4.8
CVSSv3
CVE-2021-34760
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficien...
Cisco Telepresence Management Suite
4.8
CVSSv3
CVE-2021-1271
A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulne...
Cisco Web Security Virtual Appliance
5.4
CVSSv3
CVE-2019-15270
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to ...
Cisco Firepower Management Center Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »