EDB-17304
functionalCisco Unified Operations Manager - Multiple Vulnerabilities
view exploit source exploit_dbverifiedtype remoteauthor Sense of Securitypublished 2011-05-18catalog exploit_db
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-0966US | medium6.8 | Exploit | ||
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitra… | ||||
| CVE-2011-0962US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before… | ||||
| CVE-2011-0961US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrar… | ||||
| CVE-2011-0960US | high7.5 | Exploit | ||
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to… | ||||
| CVE-2011-0959US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan