/
attack_type:information_disclosure × latest_source_host:sec.cloudapps.cisco.com × limpar

Resultados

3 casos · pág. 1/1

sec.cloudapps.cisco.com · high

Cisco Finesse unauthenticated SSRF vulnerability (CVE-2026-20362) allows limited information disclosure

Cisco disclosed CVE-2026-20362, a server-side request forgery (SSRF) vulnerability in the web-based management interface of Cisco Finesse. An unauthenticated, remote attacker could exploit it by sending a crafted HTTP request to an affected device. Successful exploitation could expose limited sensitive information from services associated…

sec.cloudapps.cisco.com · medium

Cisco APIC export policies flaw (CVE-2026-76488) lets authenticated admins read sensitive files and escalate to root

Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key ma…

sec.cloudapps.cisco.com · critical

Cisco patches multiple vulnerabilities in Cisco License (Smart Software Manager) On-Prem, rated Critical

Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS)…