# Vulnerabilities published in 2016


- [CVE-2016-1389](https://insights.sbomify.com/CVE-2016-1389/): Open redirect in cisco:webex meetings server (high 7.4)
- [CVE-2016-1388](https://insights.sbomify.com/CVE-2016-1388/): Command injection in cisco:network analysis module (critical 9.8)
- [CVE-2016-1387](https://insights.sbomify.com/CVE-2016-1387/): Auth bypass in cisco:telepresence tc software (critical 9.8)
- [CVE-2016-1386](https://insights.sbomify.com/CVE-2016-1386/): Other in cisco:application policy infrastructure controller enterprise module (high 7.5)
- [CVE-2016-1385](https://insights.sbomify.com/CVE-2016-1385/): Denial of service in cisco:adaptive security appliance software (medium 6.5)
- [CVE-2016-1384](https://insights.sbomify.com/CVE-2016-1384/): Other in cisco:ios (high 7.5)
- [CVE-2016-1383](https://insights.sbomify.com/CVE-2016-1383/): Denial of service in cisco:web security appliance \(wsa\) (high 7.5)
- [CVE-2016-1382](https://insights.sbomify.com/CVE-2016-1382/): Denial of service in cisco:web security appliance \(wsa\) (high 7.5)
- [CVE-2016-1381](https://insights.sbomify.com/CVE-2016-1381/): Denial of service in cisco:web security appliance (high 7.5)
- [CVE-2016-1380](https://insights.sbomify.com/CVE-2016-1380/): Denial of service in cisco:web security appliance (high 7.5)
- [CVE-2016-1379](https://insights.sbomify.com/CVE-2016-1379/): Denial of service in cisco:adaptive security appliance software (medium 6.5)
- [CVE-2016-1378](https://insights.sbomify.com/CVE-2016-1378/): Information disclosure in cisco:ios (medium 5.3)
- [CVE-2016-1377](https://insights.sbomify.com/CVE-2016-1377/): Cross-site scripting in cisco:unity connection (medium 6.1)
- [CVE-2016-1376](https://insights.sbomify.com/CVE-2016-1376/): Denial of service in cisco:ios xr (medium 5.3)
- [CVE-2016-1375](https://insights.sbomify.com/CVE-2016-1375/): Cross-site scripting in cisco:ip interoperability and collaboration system (medium 6.1)
- [CVE-2016-1374](https://insights.sbomify.com/CVE-2016-1374/): Command injection in cisco:unified computing system performance manager (high 8.8)
- [CVE-2016-1373](https://insights.sbomify.com/CVE-2016-1373/): Server-side request forgery in cisco:finesse (high 8.6)
- [CVE-2016-1372](https://insights.sbomify.com/CVE-2016-1372/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-1371](https://insights.sbomify.com/CVE-2016-1371/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-1370](https://insights.sbomify.com/CVE-2016-1370/): Denial of service in cisco:network analysis module software (medium 5.3)
- [CVE-2016-1369](https://insights.sbomify.com/CVE-2016-1369/): Denial of service in cisco:asa with firepower services (high 7.5)
- [CVE-2016-1368](https://insights.sbomify.com/CVE-2016-1368/): Denial of service in cisco:firesight system software (high 7.5)
- [CVE-2016-1367](https://insights.sbomify.com/CVE-2016-1367/): Denial of service in cisco:adaptive security appliance software (high 7.5)
- [CVE-2016-1366](https://insights.sbomify.com/CVE-2016-1366/): Misconfiguration in cisco:ios xr (medium 6.5)
- [CVE-2016-1365](https://insights.sbomify.com/CVE-2016-1365/): Command injection in cisco:application policy infrastructure controller enterprise module (high 8.8)
- [CVE-2016-1364](https://insights.sbomify.com/CVE-2016-1364/): Denial of service in cisco:wireless lan controller software (high 7.5)
- [CVE-2016-1363](https://insights.sbomify.com/CVE-2016-1363/): Memory corruption in cisco:wireless lan controller software (critical 9.8)
- [CVE-2016-1362](https://insights.sbomify.com/CVE-2016-1362/): Denial of service in cisco:aireos (high 7.5)
- [CVE-2016-1361](https://insights.sbomify.com/CVE-2016-1361/): Denial of service in cisco:ios xr (medium 5.3)
- [CVE-2016-1360](https://insights.sbomify.com/CVE-2016-1360/): Hardcoded credentials in cisco:prime lan management solution (high 7.1)
- [CVE-2016-1359](https://insights.sbomify.com/CVE-2016-1359/): Code injection in cisco:prime infrastructure (high 8.8)
- [CVE-2016-1358](https://insights.sbomify.com/CVE-2016-1358/): XML external entity in cisco:prime infrastructure (medium 6.4)
- [CVE-2016-1357](https://insights.sbomify.com/CVE-2016-1357/): Missing authorization in cisco:cisco policy suite (medium 5.3)
- [CVE-2016-1356](https://insights.sbomify.com/CVE-2016-1356/): Information disclosure in cisco:firesight system software (low 3.7)
- [CVE-2016-1355](https://insights.sbomify.com/CVE-2016-1355/): Cross-site scripting in cisco:firesight system software (medium 6.1)
- [CVE-2016-1354](https://insights.sbomify.com/CVE-2016-1354/): Cross-site scripting in cisco:unified communications domain manager (medium 6.1)
- [CVE-2016-1353](https://insights.sbomify.com/CVE-2016-1353/): Denial of service in cisco:videoscape distribution suite for internet streaming (medium 5.3)
- [CVE-2016-1352](https://insights.sbomify.com/CVE-2016-1352/): Command injection in cisco:unified computing system central software (critical 9.8)
- [CVE-2016-1351](https://insights.sbomify.com/CVE-2016-1351/): Denial of service in cisco:ios (high 7.5)
- [CVE-2016-1350](https://insights.sbomify.com/CVE-2016-1350/): Denial of service in cisco:ios xe (high 7.5)
- [CVE-2016-1349](https://insights.sbomify.com/CVE-2016-1349/): Denial of service in cisco:ios xe (high 7.5)
- [CVE-2016-1348](https://insights.sbomify.com/CVE-2016-1348/): Denial of service in cisco:ios xe (high 7.5)
- [CVE-2016-1347](https://insights.sbomify.com/CVE-2016-1347/): Denial of service in cisco:ios (high 7.5)
- [CVE-2016-1346](https://insights.sbomify.com/CVE-2016-1346/): Denial of service in dell:emc powerscale onefs (medium 5.9)
- [CVE-2016-1345](https://insights.sbomify.com/CVE-2016-1345/): Security feature bypass in cisco:asa with firepower services (high 7.5)
- [CVE-2016-1344](https://insights.sbomify.com/CVE-2016-1344/): Denial of service in cisco:ios xe (medium 5.9)
- [CVE-2016-1343](https://insights.sbomify.com/CVE-2016-1343/): XML external entity in cisco:information server (critical 10.0)
- [CVE-2016-1342](https://insights.sbomify.com/CVE-2016-1342/): Information disclosure in cisco:secure firewall management center (medium 5.3)
- [CVE-2016-1341](https://insights.sbomify.com/CVE-2016-1341/): Hardcoded credentials in cisco:nx-os (critical 9.8)
- [CVE-2016-1340](https://insights.sbomify.com/CVE-2016-1340/): Memory corruption in cisco:unified computing system platform emulator (high 8.4)
- [CVE-2016-1339](https://insights.sbomify.com/CVE-2016-1339/): Command injection in cisco:unified computing system platform emulator (high 7.8)
- [CVE-2016-1338](https://insights.sbomify.com/CVE-2016-1338/): Denial of service in cisco:telepresence video communication server software (medium 6.5)
- [CVE-2016-1337](https://insights.sbomify.com/CVE-2016-1337/): Information disclosure in cisco:epc3928 firmware (high 8.1)
- [CVE-2016-1336](https://insights.sbomify.com/CVE-2016-1336/): Denial of service in cisco:epc3928 firmware (high 7.5)
- [CVE-2016-1335](https://insights.sbomify.com/CVE-2016-1335/): Privilege escalation in cisco:asr 5000 series software (high 7.5)
- [CVE-2016-1334](https://insights.sbomify.com/CVE-2016-1334/): Missing authorization in cisco:small business wireless access points firmware (medium 5.3)
- [CVE-2016-1333](https://insights.sbomify.com/CVE-2016-1333/): Denial of service in cisco:ios (medium 6.5)
- [CVE-2016-1331](https://insights.sbomify.com/CVE-2016-1331/): Cross-site scripting in sun:opensolaris (medium 6.1)
- [CVE-2016-1330](https://insights.sbomify.com/CVE-2016-1330/): Denial of service in zzinc:keymouse firmware (medium 6.5)
- [CVE-2016-1329](https://insights.sbomify.com/CVE-2016-1329/): Hardcoded credentials in samsung:x14j firmware (critical 9.8)
- [CVE-2016-1328](https://insights.sbomify.com/CVE-2016-1328/): Denial of service in cisco:epc3928 firmware (high 7.5)
- [CVE-2016-1327](https://insights.sbomify.com/CVE-2016-1327/): Memory corruption in cisco:dpc2203 cable modem firmware (critical 9.8)
- [CVE-2016-1326](https://insights.sbomify.com/CVE-2016-1326/): Denial of service in cisco:dpq3925 8x4 docsis 3.0 wireless residential gateway with embedded digital voice adapter (high 7.5)
- [CVE-2016-1325](https://insights.sbomify.com/CVE-2016-1325/): Information disclosure in cisco:dpc3939 wireless residential voice gateway firmware (high 7.5)
- [CVE-2016-1324](https://insights.sbomify.com/CVE-2016-1324/): Denial of service in cisco:spark (medium 5.3)
- [CVE-2016-1323](https://insights.sbomify.com/CVE-2016-1323/): Information disclosure in cisco:spark (medium 4.3)
- [CVE-2016-1322](https://insights.sbomify.com/CVE-2016-1322/): Missing authorization in cisco:spark (high 7.5)
- [CVE-2016-1321](https://insights.sbomify.com/CVE-2016-1321/): Hardcoded credentials in cisco:universal small cell firmware (medium 5.8)
- [CVE-2016-1320](https://insights.sbomify.com/CVE-2016-1320/): Command injection in cisco:prime collaboration (medium 6.7)
- [CVE-2016-1319](https://insights.sbomify.com/CVE-2016-1319/): Information disclosure in samsung:x14j firmware (medium 5.3)
- [CVE-2016-1318](https://insights.sbomify.com/CVE-2016-1318/): Cross-site scripting in cisco:application policy infrastructure controller enterprise module (medium 6.1)
- [CVE-2016-1317](https://insights.sbomify.com/CVE-2016-1317/): Information disclosure in zyxel:gs1900-10hp firmware (medium 4.3)
- [CVE-2016-1316](https://insights.sbomify.com/CVE-2016-1316/): Information disclosure in cisco:telepresence video communication server software (medium 5.3)
- [CVE-2016-1315](https://insights.sbomify.com/CVE-2016-1315/): Security feature bypass in cisco:email security appliance firmeware (high 7.5)
- [CVE-2016-1314](https://insights.sbomify.com/CVE-2016-1314/): Cross-site scripting in sun:opensolaris (medium 6.1)
- [CVE-2016-1313](https://insights.sbomify.com/CVE-2016-1313/): Hardcoded credentials in cisco:ucs invicta c3124sa appliance (critical 9.8)
- [CVE-2016-1312](https://insights.sbomify.com/CVE-2016-1312/): Denial of service in cisco:asa 5500 csc-ssm firmware (high 7.5)
- [CVE-2016-1311](https://insights.sbomify.com/CVE-2016-1311/): Cross-site scripting in cisco:jabber guest (medium 6.1)
- [CVE-2016-1310](https://insights.sbomify.com/CVE-2016-1310/): Cross-site scripting in sun:opensolaris (medium 6.1)
- [CVE-2016-1309](https://insights.sbomify.com/CVE-2016-1309/): Cross-site scripting in cisco:webex meetings server (medium 6.1)
- [CVE-2016-1308](https://insights.sbomify.com/CVE-2016-1308/): SQL injection in samsung:x14j firmware (medium 6.5)
- [CVE-2016-1307](https://insights.sbomify.com/CVE-2016-1307/): Hardcoded credentials in zyxel:gs1900-10hp firmware (medium 5.4)
- [CVE-2016-1306](https://insights.sbomify.com/CVE-2016-1306/): Cross-site scripting in sun:opensolaris (medium 6.1)
- [CVE-2016-1305](https://insights.sbomify.com/CVE-2016-1305/): Cross-site scripting in cisco:application policy infrastructure controller enterprise module (medium 6.1)
- [CVE-2016-1304](https://insights.sbomify.com/CVE-2016-1304/): Cross-site scripting in cisco:unity connection (medium 6.1)
- [CVE-2016-1303](https://insights.sbomify.com/CVE-2016-1303/): Denial of service in cisco:500 series switch firmware (high 7.5)
- [CVE-2016-1302](https://insights.sbomify.com/CVE-2016-1302/): Privilege escalation in cisco:nx-os (high 8.8)
- [CVE-2016-1301](https://insights.sbomify.com/CVE-2016-1301/): Missing authorization in cisco:asa cx context-aware security software (high 8.8)
- [CVE-2016-1300](https://insights.sbomify.com/CVE-2016-1300/): Cross-site scripting in cisco:unity connection (medium 6.1)
- [CVE-2016-1299](https://insights.sbomify.com/CVE-2016-1299/): Denial of service in cisco:300 series managed switch firmware (medium 5.3)
- [CVE-2016-1298](https://insights.sbomify.com/CVE-2016-1298/): Cross-site scripting in cisco:unified contact center express (medium 6.1)
- [CVE-2016-1297](https://insights.sbomify.com/CVE-2016-1297/): Privilege escalation in cisco:application control engine software (high 8.8)
- [CVE-2016-1296](https://insights.sbomify.com/CVE-2016-1296/): Security feature bypass in cisco:web security appliance (high 7.5)
- [CVE-2016-1295](https://insights.sbomify.com/CVE-2016-1295/): Information disclosure in cisco:adaptive security appliance software (medium 5.3)
- [CVE-2016-1294](https://insights.sbomify.com/CVE-2016-1294/): Cross-site scripting in cisco:firesight system software (medium 6.1)
- [CVE-2016-1293](https://insights.sbomify.com/CVE-2016-1293/): Cross-site scripting in cisco:firesight system software (medium 6.1)
- [CVE-2016-1291](https://insights.sbomify.com/CVE-2016-1291/): Deserialization in cisco:evolved programmable network manager (critical 9.8)
- [CVE-2016-1290](https://insights.sbomify.com/CVE-2016-1290/): Privilege escalation in cisco:evolved programmable network manager (high 8.1)
- [CVE-2016-1289](https://insights.sbomify.com/CVE-2016-1289/): Memory corruption in cisco:evolved programmable network manager (critical 9.8)
- [CVE-2016-1288](https://insights.sbomify.com/CVE-2016-1288/): Denial of service in cisco:web security appliance (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/71/