Vulnerabilites related to cisco - application_and_content_networking_system_software
Vulnerability from fkie_nvd
Published
2013-08-01 13:32
Modified
2025-04-11 00:51
Severity ?
Summary
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.
Impacted products
Vendor Product Version
cisco wide_area_application_services 4.1.1
cisco wide_area_application_services 4.1.1
cisco wide_area_application_services 4.1.1
cisco wide_area_application_services 4.1.1
cisco wide_area_application_services 4.1.1
cisco wide_area_application_services 4.1.3
cisco wide_area_application_services 4.1.3
cisco wide_area_application_services 4.1.3
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.5
cisco wide_area_application_services 4.1.7
cisco wide_area_application_services 4.1.7
cisco wide_area_application_services 4.1.7
cisco wide_area_application_services 4.3.1
cisco wide_area_application_services 4.3.3
cisco wide_area_application_services 4.3.5
cisco wide_area_application_services 4.3.5
cisco wide_area_application_services 5.0.1
cisco wide_area_application_services 5.0.3
cisco wide_area_application_services 5.0.3
cisco wide_area_application_services 5.0.3
cisco wide_area_application_services 5.0.3
cisco wide_area_application_services 4.2.1
cisco wide_area_application_services 4.2.3
cisco wide_area_application_services 4.2.3
cisco wide_area_application_services 4.2.3
cisco wide_area_application_services 4.2.3
cisco wide_area_application_services 4.4.1
cisco wide_area_application_services 4.4.3
cisco wide_area_application_services 4.4.3
cisco wide_area_application_services 4.4.3
cisco wide_area_application_services 4.4.3
cisco wide_area_application_services 4.4.5
cisco wide_area_application_services 4.4.5
cisco wide_area_application_services 4.4.5
cisco wide_area_application_services 4.4.5
cisco wide_area_application_services 4.4.5
cisco wide_area_application_services 4.4.7
cisco wide_area_application_services 5.1.1
cisco wide_area_application_services 5.1.1
cisco wide_area_application_services 5.1.1
cisco wide_area_application_services 5.2
cisco wide_area_application_services 4.0.1
cisco wide_area_application_services 4.0.3
cisco wide_area_application_services 4.0.5
cisco wide_area_application_services 4.0.7
cisco wide_area_application_services 4.0.9
cisco wide_area_application_services 4.0.11
cisco wide_area_application_services 4.0.13
cisco wide_area_application_services 4.0.17
cisco wide_area_application_services 4.0.19
cisco wide_area_application_services 4.0.21
cisco wide_area_application_services 4.0.23
cisco wide_area_application_services 4.0.25
cisco wide_area_application_services 4.0.27
cisco application_and_content_networking_system_software 4.1.3
cisco application_and_content_networking_system_software 4.2.3
cisco application_and_content_networking_system_software 4.2.5
cisco application_and_content_networking_system_software 4.2.7.3
cisco application_and_content_networking_system_software 4.2.9.3
cisco application_and_content_networking_system_software 4.2.11.5
cisco application_and_content_networking_system_software 4.2.13.1
cisco application_and_content_networking_system_software 5.0
cisco application_and_content_networking_system_software 5.0.1
cisco application_and_content_networking_system_software 5.0.3.5
cisco application_and_content_networking_system_software 5.0.5.9
cisco application_and_content_networking_system_software 5.0.7.10
cisco application_and_content_networking_system_software 5.0.9.9
cisco application_and_content_networking_system_software 5.0.11.6
cisco application_and_content_networking_system_software 5.0.13.2
cisco application_and_content_networking_system_software 5.0.15.1
cisco application_and_content_networking_system_software 5.0.17.6
cisco application_and_content_networking_system_software 5.1.1.3
cisco application_and_content_networking_system_software 5.1.3.15
cisco application_and_content_networking_system_software 5.1.5.2
cisco application_and_content_networking_system_software 5.1.7.7
cisco application_and_content_networking_system_software 5.1.9.5
cisco application_and_content_networking_system_software 5.1.11.6
cisco application_and_content_networking_system_software 5.1.13.7
cisco application_and_content_networking_system_software 5.1.15.5
cisco application_and_content_networking_system_software 5.4
cisco application_and_content_networking_system_software 5.4.1.10
cisco application_and_content_networking_system_software 5.4.3.17
cisco application_and_content_networking_system_software 5.4.5.7
cisco application_and_content_networking_system_software 5.4.7.3
cisco application_and_content_networking_system_software 5.5
cisco application_and_content_networking_system_software 5.5.1.7
cisco application_and_content_networking_system_software 5.5.3.1
cisco application_and_content_networking_system_software 5.5.5.4
cisco application_and_content_networking_system_software 5.5.7.7
cisco application_and_content_networking_system_software 5.5.9.9
cisco application_and_content_networking_system_software 5.5.11.2
cisco application_and_content_networking_system_software 5.5.13.7
cisco application_and_content_networking_system_software 5.5.15.2
cisco application_and_content_networking_system_software 5.5.17
cisco application_and_content_networking_system_software 5.5.19
cisco application_and_content_networking_system_software 5.5.21
cisco application_and_content_networking_system_software 5.5.23
cisco application_and_content_networking_system_software 5.5.25
cisco application_and_content_networking_system_software 5.5.27
cisco application_and_content_networking_system_software 5.5.29
cisco enterprise_content_delivery_network_software 2.0
cisco enterprise_content_delivery_network_software 2.5.3
cisco enterprise_content_delivery_network_software 2.5.5
cisco internet_streamer_content_delivery_system 2.0
cisco internet_streamer_content_delivery_system 2.6
cisco internet_streamer_content_delivery_system 3.1
cisco videoscape_delivery_system_for_internet_streamer 1.0.0
cisco videoscape_delivery_system_for_internet_streamer 3.2.0
cisco videoscape_delivery_system_for_internet_streamer 3.2.1
cisco videoscape_delivery_system_origin_server 1.0
cisco videoscape_distribution_suite_optimization_engine 1.0.0
cisco videoscape_distribution_suite_service_broker 1.0.0
cisco videoscape_distribution_suite_service_broker 1.0.1
cisco videoscape_distribution_suite_service_broker 1.1.0



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2A08E1E-D4AC-4021-AB43-8166F4EAD9A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.1:a:*:*:*:*:*:*",
              "matchCriteriaId": "093206E6-6D96-441C-A718-36827C2A3750",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.1:b:*:*:*:*:*:*",
              "matchCriteriaId": "839EFA10-529F-441D-87F0-1EDC6F40F731",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.1:c:*:*:*:*:*:*",
              "matchCriteriaId": "7F98A53E-DD8C-44E0-B138-B678A499FAD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.1:d:*:*:*:*:*:*",
              "matchCriteriaId": "B3A23B4B-3E6B-43A2-A1C4-D9A11FCC59AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB41F77E-D6C7-4E8D-8EF3-12451057F3D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.3:a:*:*:*:*:*:*",
              "matchCriteriaId": "AF1AECDF-4333-4705-97F6-8D0B091B6000",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.3:b:*:*:*:*:*:*",
              "matchCriteriaId": "1BF9647A-FDA1-48C2-80FE-430552D61638",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:a:*:*:*:*:*:*",
              "matchCriteriaId": "7D3E92F6-2FD5-45D1-A273-20C6E9970AC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:b:*:*:*:*:*:*",
              "matchCriteriaId": "E2D3596A-9E11-450C-807D-406BD0A1A806",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:c:*:*:*:*:*:*",
              "matchCriteriaId": "B7C9941C-C1EC-4F49-893A-0D3AD7DE76E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:d:*:*:*:*:*:*",
              "matchCriteriaId": "A9D0FDCE-1B72-470D-B027-37FB5DCB8647",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:e:*:*:*:*:*:*",
              "matchCriteriaId": "FE1C168B-65F8-449E-9EC8-6229EEDD3166",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:f:*:*:*:*:*:*",
              "matchCriteriaId": "A547E973-DE4B-4A39-A132-6FF9A663E91B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.5:g:*:*:*:*:*:*",
              "matchCriteriaId": "BB483EDF-529B-4C21-9ADB-776430B24921",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "14FBC408-7B98-414E-AA8B-B9B644CEA4D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.7:a:*:*:*:*:*:*",
              "matchCriteriaId": "B0B1EF08-52EC-4B7E-80EA-A2C98C64D206",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.1.7:b:*:*:*:*:*:*",
              "matchCriteriaId": "AC53B795-F475-4306-87DD-D37EB9F19189",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "651AD3E6-06AA-4AAD-802B-748E4FA2376C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9D6E0A1-AB8D-4F3D-B95B-0584785F75B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4D0FB0B-E392-4535-BCD2-9BF485765B12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.3.5:a:*:*:*:*:*:*",
              "matchCriteriaId": "203B4800-18F8-47E2-B6EB-03DB9B31608A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0A96DA8-43BF-4D5D-97B5-1599B533FBC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5569334B-C66D-49EE-956E-8A6AD32532DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.0.3:a:*:*:*:*:*:*",
              "matchCriteriaId": "D4C93313-B465-4530-9B67-782B40678228",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.0.3:c:*:*:*:*:*:*",
              "matchCriteriaId": "EF1DA0E6-3653-4903-B90E-07DDFA90CF53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.0.3:d:*:*:*:*:*:*",
              "matchCriteriaId": "B7473878-7A5A-4532-B268-207EA9A694E3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E02CBEA1-34F1-4E21-8329-8BC11AC14C8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C42C0832-1061-42DF-8F90-6EE69BD62E60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.2.3:a:*:*:*:*:*:*",
              "matchCriteriaId": "ADF2B1A0-9D42-4E7C-A3E5-0AD35EEFEF5D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.2.3:b:*:*:*:*:*:*",
              "matchCriteriaId": "2A0D159D-818B-4E6D-B57F-BEBA9A27C805",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.2.3:c:*:*:*:*:*:*",
              "matchCriteriaId": "26830D5F-F5EA-4E91-BFAC-31F0D0A1229D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DEC1811-94D3-4BA3-B10E-07FE916B6022",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C954B9A-42A1-4B83-ABFB-69CFE9E8C6B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.3:a:*:*:*:*:*:*",
              "matchCriteriaId": "989B17E6-B366-4F38-A7AD-E0A37D1FFBAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.3:b:*:*:*:*:*:*",
              "matchCriteriaId": "9F622C2B-B6C3-48F8-BE2D-BBE3AF388F97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.3:c:*:*:*:*:*:*",
              "matchCriteriaId": "2FD954CF-9C7C-4BC1-B847-E15BEA14B7F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A4612F9-4DFC-489B-83B9-FAA2D49CC740",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.5:a:*:*:*:*:*:*",
              "matchCriteriaId": "D7EA263B-CDA5-40BC-88AA-DFAA2C118C93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.5:b:*:*:*:*:*:*",
              "matchCriteriaId": "346EDFB4-2519-4F8D-B260-AD1C476FB6F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.5:c:*:*:*:*:*:*",
              "matchCriteriaId": "070C7194-4D9B-4DBD-93A9-1720746875CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.5:d:*:*:*:*:*:*",
              "matchCriteriaId": "93E106B4-3E58-4DDA-A3B1-DCF18CABA42A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "498970B4-AE0A-4B5B-B365-8F8320C7C860",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BB7F3B8-82D6-43CF-A94D-435BE14EE080",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.1.1:a:*:*:*:*:*:*",
              "matchCriteriaId": "0CE19FB0-0235-4B62-ACFE-50BD8B135E65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.1.1:b:*:*:*:*:*:*",
              "matchCriteriaId": "B4087380-469A-4B09-BD1D-7792671E3A99",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "50EAC274-984F-4F3C-A129-E9864CA982B0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8A2CC13-7854-4AC2-8550-5CE56EC47371",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "18790F69-C8E4-4562-B327-11C3E3E3C344",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "60439F29-ED59-4A64-BA5C-BAD560F8EEF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3773CE5E-D27E-46A0-B2EC-4693747FCFD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A813F07A-0429-4C5F-B821-EDAB74B93072",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "563442F9-81B4-48C7-BF78-4993C870047E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC96EADC-B910-4E8F-872B-9B418325B8BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAD862F3-EA53-44D6-8646-E8C825CF239D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "826DB554-4F11-4FBD-AA4E-E86C6D100D72",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A0C914D-633E-47A2-95BB-B95E920E9556",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1327E35-DE7C-4A3B-8777-D9403EFE754A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "13F3FE7E-4FCA-48C4-83FE-C0087DDAD5B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:wide_area_application_services:4.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "F16FE683-E466-4023-8859-B56A3AD12648",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D072C0DB-364E-4810-9C86-ABD93BD33308",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE5BCB2E-65A8-46D1-9DE6-BAF94C9D9083",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C60E9F3-8FFA-4B72-B04D-4C53AC2004B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E437DB8D-E335-4A3D-9D83-EF4AD2B12324",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "09824600-59A2-4E09-8C14-982D2C32E40F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.11.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C86A3647-12BC-4477-BC39-0E4BFAC13B5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.13.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C31F2484-51A3-44DC-BC0F-1E1CCE017F0C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4896155-D1CE-4F9B-84CC-FF3EE3E4D5BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3230EB3-C218-4D68-9F57-6297B23BB878",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "47EB95E9-336D-45C2-AB70-3B6CA096338C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.5.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "99175A3D-AD50-4500-80DE-68FFF6FFD008",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.7.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DC46876-2362-4BFD-9A19-698B85C42F79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.9.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D809176-DAFA-4E74-9038-8FF74BFA5A24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.11.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1728237-7655-47DF-87FB-19F1FDA4F19F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.13.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E886A09-904C-45E9-BC6C-09CBB4F96A0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.15.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "337049D5-B480-4C53-8E1C-42FE34668743",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.17.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "306C91DD-CE70-4F8D-9CD2-BAF90BA954E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8ABED70C-223F-4291-9F4A-2327267ADA9E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.3.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "37E32E34-99CC-4944-B1D4-839DAB79ABE8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A493AAE-63AC-4341-B8FE-1308D614565E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.7.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "08087DDD-BC38-43D9-A137-679C6DC1C15E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "826F3764-3E20-4F35-823C-806738944FC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.11.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABA4F3C7-2D67-4D77-84AC-A4AE8B1C302E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.13.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D2B0EE7-3088-458D-BF32-B00B5EDCA9AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.15.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D218DB53-9F40-4301-B063-55533BE98291",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7DC5428-DBBF-4EB2-BAD0-D5800A67049D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5DE0F58-0D6B-4468-A05D-45D366C2D588",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.3.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E4AB5A5-771F-485C-968E-929CF70DFAC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "565D9BCA-750C-49A7-99A3-6C981E4A1BD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C86239D2-0F86-4CA2-8012-4060E69551A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "69293F9D-B5FD-4E06-A8ED-D15B2636B7FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "1602EDCE-0C5D-491E-B198-13A700F482A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DF5D9B6-893B-4C62-8270-A3810FAB25DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "46DE56D8-4F5A-41A9-A4AC-967060FC11B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.7.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "94D07D88-3E89-4F65-B8E8-120A482095EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.9.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E002861-3F4D-4C20-AC82-C88044753A7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.11.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2794C94A-3FE9-4254-9658-A7CF7AE37391",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.13.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F0F7037-89AC-4CE5-B7A1-79B5D4684A97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.15.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1819397A-AF3E-43E8-BB2D-077AC3A7DA80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "441543F2-1ED4-4C44-AD72-0ED0D5100BF5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "E12C29A5-6D40-4E03-944D-BCD48F24B8C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA85CD2C-EA10-43A6-BC45-1C547551AFD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1AF80DF-6EA7-4874-975B-C71CC9E8F601",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9E7A6C0-2EDA-40D8-81C0-EA665FAA6F8A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B9305CF-8509-4EA6-9A94-72C8140CFC56",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "96CB429B-509F-4CD0-B1E9-3F43144BB66C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "613E7B34-5D64-4671-BB44-CBDC92ECAB2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "685DDE38-BA05-4491-943F-76A4049C0251",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "75A26A17-752A-4AD9-B256-2BBEDCFABE4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:internet_streamer_content_delivery_system:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C18E2BA8-3181-4497-82F5-BB34DA224374",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:internet_streamer_content_delivery_system:2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C469A25-D729-4A4A-AED1-B01C5382937B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:internet_streamer_content_delivery_system:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E857CA39-8814-4786-AB59-4D1FC2FA7E09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D402CF9-D717-4AAB-8F18-E2F9D4516AC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:3.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E2DA792-9F8A-483C-A0CA-C7541394617E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:3.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFDEF616-1774-4AB6-8272-3BE1FDB29CDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_delivery_system_origin_server:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C710807C-76F5-4543-B4A4-16BBB47EC7AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_distribution_suite_optimization_engine:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "99EE4E99-43FC-4BC3-A852-3E36933D09CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DFDDA1E-183D-4094-92CE-EB1F85EBDAB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C3BF288-D7C6-4853-8811-49E0A2AA4738",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "32C0BD20-8219-4AAB-9E48-489D74E80A39",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790."
    },
    {
      "lang": "es",
      "value": "El framework web en Cisco WAAS Software anterior a 4.x y 5.x anterior a 5.0.3e, 5.1.x anterior a 5.1.1c, y 5.2.x anterior a 5.2.1; Cisco ACNS Software 4.x y 5.x anterior a 5.5.29.2; Cisco ECDS Software 2.x anterior a 2.5.6; Cisco CDS-IS Software 2.x anterior a 2.6.3.b50 y 3.1.x anterior a 3.1.2b54; Cisco VDS-IS Software 3.2.x anterior a 3.2.1.b9; Cisco VDS-SB Software 1.x anterior a 1.1.0-b96; Cisco VDS-OE Software 1.x anterior a 1.0.1; y Cisco VDS-OS Software 1.x en modo central-management, permite a usuarios autenticados remotamente ejecutar comandos arbitrarios a\u00f1adiendo cadenas con valores  modificados en los campos GUI. Aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, y CSCug56790."
    }
  ],
  "id": "CVE-2013-3444",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-08-01T13:32:30.397",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "http://secunia.com/advisories/54367"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://secunia.com/advisories/54369"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://secunia.com/advisories/54370"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://secunia.com/advisories/54372"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securityfocus.com/bid/61543"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securitytracker.com/id/1028852"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://www.securitytracker.com/id/1028853"
    },
    {
      "source": "psirt@cisco.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/54367"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/54369"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/54370"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/54372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/61543"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1028852"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1028853"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2015-06-12 10:59
Modified
2025-04-12 10:46
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650.
Impacted products



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5\\(9\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "3443BB17-3508-4DA0-A09A-6BE41FCFE3CC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de XSS en Cisco Application and Content Networking System (ACNS) 5.5(9) permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a trav\u00e9s de una URL manipulada, tambi\u00e9n conocida como Bug ID CSCuu70650."
    }
  ],
  "id": "CVE-2015-0774",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2015-06-12T10:59:03.587",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39257"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1032539"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39257"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1032539"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2015-0774 (GCVE-0-2015-0774)
Vulnerability from cvelistv5
Published
2015-06-12 10:00
Modified
2024-08-06 04:17
Severity ?
CWE
  • n/a
Summary
Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650.
References
http://www.securitytracker.com/id/1032539 vdb-entry, x_refsource_SECTRACK
http://tools.cisco.com/security/center/viewAlert.x?alertId=39257 vendor-advisory, x_refsource_CISCO
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:17:32.846Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1032539",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032539"
          },
          {
            "name": "20150609 Cisco Application and Content Networking System URL Page Return Cross-Site Scripting Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39257"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1032539",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032539"
        },
        {
          "name": "20150609 Cisco Application and Content Networking System URL Page Return Cross-Site Scripting Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39257"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2015-0774",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1032539",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032539"
            },
            {
              "name": "20150609 Cisco Application and Content Networking System URL Page Return Cross-Site Scripting Vulnerability",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39257"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2015-0774",
    "datePublished": "2015-06-12T10:00:00",
    "dateReserved": "2015-01-07T00:00:00",
    "dateUpdated": "2024-08-06T04:17:32.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-3444 (GCVE-0-2013-3444)
Vulnerability from cvelistv5
Published
2013-07-31 19:00
Modified
2024-08-06 16:07
Severity ?
CWE
  • n/a
Summary
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.
References
http://www.securitytracker.com/id/1028852 vdb-entry, x_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm vendor-advisory, x_refsource_CISCO
http://secunia.com/advisories/54367 third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/86122 vdb-entry, x_refsource_XF
http://secunia.com/advisories/54372 third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/61543 vdb-entry, x_refsource_BID
http://secunia.com/advisories/54370 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/54369 third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id/1028853 vdb-entry, x_refsource_SECTRACK
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:07:37.992Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1028852",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1028852"
          },
          {
            "name": "20130731 Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm"
          },
          {
            "name": "54367",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54367"
          },
          {
            "name": "multiple-cisco-cve20133444-command-exec(86122)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122"
          },
          {
            "name": "54372",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54372"
          },
          {
            "name": "61543",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/61543"
          },
          {
            "name": "54370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54370"
          },
          {
            "name": "54369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/54369"
          },
          {
            "name": "1028853",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1028853"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-07-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1028852",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1028852"
        },
        {
          "name": "20130731 Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm"
        },
        {
          "name": "54367",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54367"
        },
        {
          "name": "multiple-cisco-cve20133444-command-exec(86122)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122"
        },
        {
          "name": "54372",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54372"
        },
        {
          "name": "61543",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/61543"
        },
        {
          "name": "54370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54370"
        },
        {
          "name": "54369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/54369"
        },
        {
          "name": "1028853",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1028853"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2013-3444",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1028852",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1028852"
            },
            {
              "name": "20130731 Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm"
            },
            {
              "name": "54367",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54367"
            },
            {
              "name": "multiple-cisco-cve20133444-command-exec(86122)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122"
            },
            {
              "name": "54372",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54372"
            },
            {
              "name": "61543",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/61543"
            },
            {
              "name": "54370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54370"
            },
            {
              "name": "54369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/54369"
            },
            {
              "name": "1028853",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1028853"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2013-3444",
    "datePublished": "2013-07-31T19:00:00",
    "dateReserved": "2013-05-06T00:00:00",
    "dateUpdated": "2024-08-06T16:07:37.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}