Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior
Críticas / altas1376▼ 50 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)298▼ 212 respecto a la semana anterior
34 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 7.8% | — | Cisco Prime Collaboration Provisioning | 22/5/2017 | 17/6/2026 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and… | |
| Modificada | Media (6.5) | 5.9% | — | Cisco Prime Collaboration Provisioning | 22/5/2017 | 17/6/2026 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and… | |
| Modificada | Media (6.5) | 9.7% | — | Cisco Prime Collaboration Provisioning | 22/5/2017 | 17/6/2026 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and… | |
| Modificada | Crítica (9.8) | 62% | 💥 Exploit | Cisco Prime Collaboration Provisioning | 18/5/2017 | 17/6/2026 | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods, which could allow access… | |
| Modificada | Alta (7.5) | 6.2% | — | Cisco Prime Collaboration Provisioning | 18/5/2017 | 17/6/2026 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of sensitive data when… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Prime Collaboration Provisioning | 3/11/2016 | 17/6/2026 | Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066 CSCut43736 CSCut43738… | |
| Modificada | Crítica (9.8) | 4.5% | — | Cisco Prime Collaboration Provisioning | 2/7/2016 | 17/6/2026 | Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513. | |
| Modificada | Media (6.5) | 1.6% | — | Cisco Prime Collaboration Provisioning | 12/10/2015 | 17/6/2026 | SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074. | |
| Modificada | Alta (9) | 2.6% | — | Cisco Prime Collaboration Provisioning | 20/9/2015 | 17/6/2026 | The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111. |