cisco enterprise network virtualization software vulnerabilities

Latest cisco enterprise network virtualization software CVEs

Newest publication first

1. CVE-2018-15402 Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability

   Published 2018-10-17

   High·CVSS 8.8 EPSS 0.48%

   A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests within the management i...

2. CVE-2018-0462 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

   Published 2018-10-05

   Medium·CVSS 4.9 EPSS 1.5%

   A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation o...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.