Cisco Enterprise Network Virtualization Software vulnerabilities

CVE-2018-15402 [HIGH] CWE-352 CVE-2018-15402: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticat A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests within the management interface. An attacker could exploit this vulnerability by convincing a ta

CVE-2018-0462 [MEDIUM] CWE-20 CVE-2018-0462: A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation of user-provided input. An attacker could exploit this vulnerability by log