Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:cisco_emergency_responder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCisco Emergency Responder (8dda8f03-25cc-5292-bdb6-6e86e6e0fe4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-12227 vulnerable 2026-06-08 05:08:45.589738 Details available
A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker could exploit this vulnerability by sending crafted URLs that include SQL statements. An exploit could allow the attacker to view or modify entries in some database tables, affecting the integrity of the data. Cisco Bug IDs: CSCvb58973.
Published: 2017-09-07T21:00:00.000Z
Updated: 2024-08-05T18:28:16.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9208 vulnerable 2026-06-08 05:08:22.968051 Details available
A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951 CSCva98954 CSCvb57494. Known Affected Releases: 11.5(2.10000.5). Known Fixed Releases: 12.0(0.98000.14) 12.0(0.98000.16).
Published: 2016-12-14T00:37:00.000Z
Updated: 2024-08-06T02:42:11.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6468 vulnerable 2026-06-08 05:08:02.571270 Details available
A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases: 11.5(1.10000.4). Known Fixed Releases: 12.0(0.98000.14).
Published: 2016-12-14T00:37:00.000Z
Updated: 2024-08-06T01:29:20.041Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.