CPE Details
Cisco Prime Access Registrar 8.0.3.1
8.0.3.1
2021-11-04
18h09 +00:00
18h09 +00:00
2021-11-04
18h55 +00:00
18h55 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:cisco:prime_access_registrar:8.0.3.1:*:*:*:*:*:*:*
Informations
Vendor
ciscoProduct
prime_access_registrarVersion
8.0.3.1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 7.5 |
Haute |
||
| A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials. Cisco expects to release software updates that address this vulnerability. | 4.8 |
Moyen |
