CVE-2019-1860

MEDIUM Year: 2019
CVSS v3 Score
5.9
Medium
CVSS v2 Score
4.0
Medium
Weakness Type
CWE-99
View all →

Vulnerability Description

A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user’s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user’s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.

Related Vulnerabilities

CVE-2025-1645

MEDIUM
CVSS:6.3(Medium)

A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulation o...

CWE-992025

CVE-2020-6245

MEDIUM
CVSS:6.5(Medium)

SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Contr...

CWE-992020

CVE-2022-27670

MEDIUM
CVSS:6.5(Medium)

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect i...

CWE-992022

CVE-2023-6602

MEDIUM
CVSS:5.3(Medium)

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

CWE-992023

CVE-2023-6604

MEDIUM
CVSS:5.3(Medium)

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbit...

CWE-992023

CVE-2024-7658

MEDIUM
CVSS:5.3(Medium)

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper...

CWE-992024