CVE-2018-15448— Cisco Registered Envelope Service 信息泄露漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2018-15448の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Registered Envelope Service Information Disclosure Vulnerability
ソース: CVE Program / CVE List V5
脆弱性説明
A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecure configuration that allows improper indexing. An attacker could exploit this vulnerability by using a search engine to look for specific data strings. A successful exploit could allow the attacker to discover certain sensitive information about the application, including usernames.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
配置
ソース: CVE Program / CVE List V5
脆弱性タイトル
Cisco Registered Envelope Service 信息泄露漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Registered Envelope Service是美国思科（Cisco）公司的一套邮件服务解决方案。该产品包括邮件的读取回执、邮件回收、邮件转发和回复功能，并提供智能手机支持。 Cisco Registered Envelope Service的用户管理功能中存在信息泄露漏洞。远程攻击者可利用该漏洞获取敏感的用户信息。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Registered Envelope Service | n/a | - |
II. CVE-2018-15448の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2018-15448のインテリジェンス情報
请登录查看更多情报信息。
CVE-2018-15448 厂商安全公告 (2)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-res-info-discvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2018-11-08 · 15 CVEs total
| CVE-2018-15450 | Cisco Prime Collaboration Assurance File Overwrite Vulnerability | |
| CVE-2018-15451 | Cisco Prime Service Catalog Cross-Site Scripting Vulnerability | |
| CVE-2018-15447 | Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability | |
| CVE-2018-15449 | Cisco Video Surveillance Media Server Denial of Service Vulnerability | |
| CVE-2018-15444 | Cisco Energy Management Suite XML External Entity Vulnerability | |
| CVE-2018-15445 | Cisco Energy Management Suite Cross-Site Request Forgery Vulnerability | |
| CVE-2018-15446 | Cisco Meeting Server Information Disclosure Vulnerability | |
| CVE-2018-15381 | Cisco Unity Express Arbitrary Command Execution Vulnerability | |
| CVE-2018-15393 | Cisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability | |
| CVE-2018-15394 | Cisco Stealthwatch Management Console Authentication Bypass Vulnerability | |
| CVE-2018-15437 | Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability | |
| CVE-2018-15439 | Cisco Small Business Switches Privileged Access Vulnerability | |
| CVE-2018-15443 | Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability | |
| CVE-2018-0284 | Cisco Meraki Local Status Page Privilege Escalation Vulnerability |
IV. 関連脆弱性
- CVE-2019-1777
Cisco Registered Envelope Service Stored Cross-Site Scriptin - CVE-2018-0208
Cisco Registered Envelope Service（cloud based）跨站脚本漏洞 - CVE-2017-12290
Cisco Registered Envelope Service 跨站脚本漏洞 - CVE-2017-12291
Cisco Registered Envelope Service 跨站脚本漏洞 - CVE-2017-12292
Cisco Registered Envelope Service 跨站脚本漏洞
同じベンダー: Cisco
- CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure - CVE-2026-20348
ClamAV XAR File Format Processing Memory Corruption Vulnerab - CVE-2026-20345
ClamAV GPT File Format Processing Memory Corruption Vulnerab - CVE-2026-20339
ClamAV PESpin File Format Processing Integer Overflow Vulner - CVE-2026-20347
ClamAV Mach-O File Format Processing Memory Corruption Vulne
同じ弱点: CWE-16
- CVE-2026-56586
HCL IEM was affected with X-Content-Type-Options Header Miss - CVE-2026-14971
This PowerVM Novalink update is being released to address - CVE-2026-4433
Tenable Operation Technology 安全漏洞 - CVE-2025-12221
CSRF Token not Properly Implemented - CVE-2025-20151
Cisco IOS and IOS XE Software SNMPv3 Configuration Restricti
V. CVE-2018-15448へのコメント
まだコメントはありません