Cisco

Secure Desktop

13 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2015-0691

  • EPSS 0.71%
  • Published 17.04.2015 01:59:25
  • Last modified 12.04.2025 10:46:40

A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.

9.3

CVE-2012-4655

  • EPSS 2.4%
  • Published 24.09.2012 17:55:07
  • Last modified 11.04.2025 00:51:21

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java compo...

4.3

CVE-2012-2495

  • EPSS 0.22%
  • Published 20.06.2012 20:55:02
  • Last modified 11.04.2025 00:51:21

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remo...

9.3

CVE-2011-0925

  • EPSS 2.36%
  • Published 28.02.2011 16:00:01
  • Last modified 11.04.2025 00:51:21

The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco ...

9.3

CVE-2011-0926

  • EPSS 4.52%
  • Published 25.02.2011 18:00:01
  • Last modified 11.04.2025 00:51:21

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation proce...

2.1

CVE-2009-5008

  • EPSS 0.06%
  • Published 14.10.2010 05:52:19
  • Last modified 11.04.2025 00:51:21

Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.

9.3

CVE-2010-0589

  • EPSS 1.57%
  • Published 15.04.2010 17:30:00
  • Last modified 11.04.2025 00:51:21

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a ...

4.3

CVE-2010-0440

Exploit
  • EPSS 39.32%
  • Published 03.02.2010 18:30:00
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web scrip...

2.1

CVE-2006-5806

  • EPSS 0.09%
  • Published 08.11.2006 22:07:00
  • Last modified 09.04.2025 00:30:58

SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from sav...

4.6

CVE-2006-5807

  • EPSS 0.11%
  • Published 08.11.2006 22:07:00
  • Last modified 09.04.2025 00:30:58

Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".