Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Filtered by product Mobility Services Engine
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4282 1 Cisco 1 Mobility Services Engine 2017-01-06 6.9 MEDIUM N/A
Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504.
CVE-2015-6316 1 Cisco 1 Mobility Services Engine 2017-01-06 6.5 MEDIUM N/A
The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.
CVE-2015-4263 1 Cisco 1 Mobility Services Engine 2016-12-28 4.0 MEDIUM N/A
The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.
CVE-2013-3469 1 Cisco 1 Mobility Services Engine 2016-11-04 5.0 MEDIUM N/A
Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to the database-replication port, and consequently obtain sensitive information, via an SSL connection, aka Bug ID CSCue50794.
CVE-2015-0673 1 Cisco 1 Mobility Services Engine 2015-09-04 4.0 MEDIUM N/A
Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.