cisco cx cloud agent vulnerabilities and exploits

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local malicious user to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit co...

Cisco Cx Cloud Agent Cisco Cx Cloud Agent 2.2

7.3

CVSSv3

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local malicious user to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the ...

Cisco Cx Cloud Agent

7.5

CVSSv2

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

131 Github repositories7 Articles

7.5

CVSSv2

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...

Apache Commons Collections Apache Commons Collections 4.0

4 Github repositories

7.2

CVSSv2

Sudo prior to 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Sudo Project Sudo Sudo Project Sudo 1.9.5 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Hci Management Node -Netapp Oncommand Unified Manager Core Package -Netapp Ontap Select Deploy Administration Utility -Netapp Ontap Tools 9

91 Github repositories1 Article

9.3

CVSSv2

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

Apache Log4j Apache Log4j 2.0 Siemens Sppa-t3000 Ses3000 Firmware Siemens Captial Siemens Captial 2019.1 Siemens Comos Siemens Desigo Cc Advanced Reports 4.0 Siemens Desigo Cc Advanced Reports 4.1 Siemens Desigo Cc Advanced Reports 4.2 Siemens Desigo Cc Advanced Reports 5.0 Siemens Desigo Cc Advanced Reports 5.1 Siemens Desigo Cc Info Center 5.0

2 Metasploit modules796 Github repositories29 Articles

5

CVSSv2

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...

Openssl Openssl 1.0.1j

4.3

CVSSv2

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

Apache Log4j Netapp Cloud Manager -Debian Debian Linux 10.0 Debian Debian Linux 11.0 Sonicwall Email Security Sonicwall Network Security Manager Sonicwall Web Application Firewall Sonicwall 6bk1602-0aa12-0tp0 Firmware Sonicwall 6bk1602-0aa22-0tp0 Firmware Sonicwall 6bk1602-0aa32-0tp0 Firmware Sonicwall 6bk1602-0aa42-0tp0 Firmware Sonicwall 6bk1602-0aa52-0tp0 Firmware

49 Github repositories5 Articles

4.3

CVSSv2

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...

Openssl Openssl Openssl Openssl 1.0.0 Openssl Openssl 1.0.0a Openssl Openssl 1.0.0b Openssl Openssl 1.0.0c Openssl Openssl 1.0.0d Openssl Openssl 1.0.0e Openssl Openssl 1.0.0f Openssl Openssl 1.0.0g Openssl Openssl 1.0.0h Openssl Openssl 1.0.0i Openssl Openssl 1.0.0j

1 Article

5

CVSSv2

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10

1 Github repository

cisco cx cloud agent vulnerabilities and exploits

CVE-2023-20043

CVE-2023-20044

CVE-2022-22965

CVE-2015-6420

CVE-2021-3156

CVE-2021-44228

CVE-2014-3569

CVE-2021-45105

CVE-2015-1788

CVE-2015-3193

Vulmon Search

About

Products

Connect