Cisco Resource Manager Essentials vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cisco Resource Manager Essentials, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2003-0732ciscociscoworks_cd1+3
EPSS score
2.09%
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.10CVE-2003-0731ciscociscoworks_cd1+3
EPSS score
2.09%
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.