Cisco CiscoWorks Common Services 2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*
part: a version: 2.2 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Ciscoworks Common Services (f733afa0-097e-5392-91fd-3c304d53eb8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3310 |
vulnerable | 2026-06-08 04:59:24.525363 |
Details available
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.
Published: 2011-10-20T00:00:00.000Z
Updated: 2024-08-06T23:29:56.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0966 |
vulnerable | 2026-06-08 04:56:40.461010 |
Details available
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:14:26.470Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0961 |
vulnerable | 2026-06-08 04:56:40.447359 |
Details available
Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:14:26.477Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0356 |
vulnerable | 2026-06-08 04:48:12.370564 |
Details available
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Published: 2005-05-31T04:00:00.000Z
Updated: 2024-08-07T21:13:53.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0112 |
vulnerable | 2026-06-08 04:47:48.545134 |
Details available
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0081 |
vulnerable | 2026-06-08 04:47:48.446717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0079 |
vulnerable | 2026-06-08 04:47:48.287292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.