Cisco Ciscoworks Common Services vulnerabilities

12 CVEs affecting Cisco Ciscoworks Common Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4237, published 2012-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2011-0966, published 2011-05-20. Medium severity, CVSS 6.8. EPSS: 41.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a ..…
CVE-2011-3310, published 2011-10-20. High severity, CVSS 9.0. EPSS: 15.2% chance of exploitation in the next 30 days. The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified…
CVE-2009-1161, published 2009-05-21. High severity, CVSS 10.0. EPSS: 12.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager,…
CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2010-3036, published 2010-10-29. High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days. Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on…
CVE-2011-0961, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 5.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or…
CVE-2008-2054, published 2008-05-29. High severity, CVSS 9.3. EPSS: 3.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.

Latest

CVE-2011-4237, published 2012-05-03. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary…
CVE-2011-2042, published 2011-10-22. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and…