Cisco Resource Manager vulnerabilities

4 CVEs affecting Cisco Resource Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0732, published 2003-10-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0731, published 2003-10-20. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly…
CVE-2003-0732, published 2003-10-20. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the…
CVE-1999-1126, published 1999-12-31. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and…
CVE-1999-1042, published 1999-12-31. Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community…