https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:32:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05485 bdu:2020-05485 https://cve.radiocsirt.org/vuln/bdu:2020-05485 https://cve.radiocsirt.org/vuln/certfr-2020-avi-758 certfr-2020-avi-758 https://cve.radiocsirt.org/vuln/certfr-2020-avi-758 https://cve.radiocsirt.org/vuln/cisco-sa-fnd-bck-ghkpnz5f <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-fnd-bck-ghkpnz5f https://cve.radiocsirt.org/vuln/cnvd-2020-66206 cnvd-2020-66206 https://cve.radiocsirt.org/vuln/cnvd-2020-66206 https://cve.radiocsirt.org/vuln/euvd-2026-201152 EUVD-2026-201152 https://cve.radiocsirt.org/vuln/euvd-2026-201152 https://cve.radiocsirt.org/vuln/fkie_cve-2020-3531 <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information.</p> <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-3531 https://cve.radiocsirt.org/vuln/ghsa-fg87-2627-3rxj <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information.</p> <p>A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could exploit this vulnerability by obtaining a cross-site request forgery (CSRF) token and then using the token with REST API requests. A successful exploit could allow the attacker to access the back-end database of the affected device and read, alter, or drop information.</p> https://cve.radiocsirt.org/vuln/ghsa-fg87-2627-3rxj https://cve.radiocsirt.org/vuln/gsd-2020-3531 gsd-2020-3531 https://cve.radiocsirt.org/vuln/gsd-2020-3531