Cisco
Cisco Prime Collaboration Assurance: vulnerabilidades y CVE
Cisco Prime Collaboration Assurance tiene 20 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE20
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-1856 | Media (6.1) | 1.1% | — | 3 may 2019 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the… |
| CVE-2019-1662 | Crítica (9.1) | 1.8% | — | 21 feb 2019 | A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The… |
| CVE-2018-15438 | Media (6.5) | 1.2% | — | 17 oct 2018 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary… |
| CVE-2018-0458 | Media (6.1) | 1.8% | — | 5 oct 2018 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based… |
| CVE-2018-0321 | Crítica (9.8) | 3.6% | — | 7 jun 2018 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to an open port in the… |
| CVE-2017-6779 | Alta (7.5) | 2.0% | — | 7 jun 2018 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk… |
| CVE-2018-0141 | Alta (8.4) | 0.42% | — | 8 mar 2018 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded… |
| CVE-2017-6659 | Alta (8.8) | 0.80% | — | 13 jun 2017 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary… |
| CVE-2017-3845 | Media (6.1) | 1.5% | — | 22 feb 2017 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based… |
| CVE-2017-3844 | Media (4.3) | 1.5% | — | 22 feb 2017 | A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products:… |
| CVE-2017-3843 | Media (4.3) | 1.5% | — | 22 feb 2017 | A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446.… |
| CVE-2016-9200 | Media (6.1) | 1.8% | — | 14 dic 2016 | A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More… |
| CVE-2016-1392 | Alta (7.4) | 1.0% | — | 5 may 2016 | Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka… |
| CVE-2015-6389 | Alta (9) | 2.6% | — | 13 dic 2015 | Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug… |
| CVE-2015-6330 | Media (6.8) | 0.59% | — | 18 nov 2015 | Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712. |
| CVE-2015-6328 | Media (6.8) | 1.9% | — | 13 oct 2015 | The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380. |
| CVE-2015-6331 | Media (6.5) | 1.6% | — | 12 oct 2015 | SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887. |
| CVE-2015-4306 | Alta (8.5) | 2.3% | — | 20 sept 2015 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant… |
| CVE-2015-4305 | Media (4) | 1.9% | — | 20 sept 2015 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for… |
| CVE-2015-4304 | Alta (9) | 2.6% | — | 20 sept 2015 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary… |