Cisco Registered Envelope Service vulnerabilities

7 CVEs affecting Cisco Registered Envelope Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1777, published 2019-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15448, published 2018-11-08. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use…
CVE-2017-3889, published 2017-04-07. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Open Redirect. This…
CVE-2018-0367, published 2018-08-15. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2019-1777, published 2019-04-18. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user…
CVE-2017-12323, published 2017-11-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2017-12321, published 2017-11-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2017-12320, published 2017-11-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…