Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:ciscoworks_common_services:3.0.5:*:*:*:*:*:*:*

part: a version: 3.0.5 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCiscoworks Common Services (f733afa0-097e-5392-91fd-3c304d53eb8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3310 vulnerable 2026-06-08 04:59:24.526227 Details available
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.
Published: 2011-10-20T00:00:00.000Z
Updated: 2024-08-06T23:29:56.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2042 vulnerable 2026-06-08 04:58:03.582125 Details available
The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018.
Published: 2011-10-22T01:00:00.000Z
Updated: 2024-09-17T02:10:43.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0966 vulnerable 2026-06-08 04:56:40.461078 Details available
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:14:26.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0961 vulnerable 2026-06-08 04:56:40.449677 Details available
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:14:26.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3036 vulnerable 2026-06-08 04:55:12.307957 Details available
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
Published: 2010-10-29T18:00:00.000Z
Updated: 2024-08-07T02:55:46.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2054 vulnerable 2026-06-08 04:50:22.777539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.