cisco prime collaboration assurance 10.5.1 vulnerabilities and exploits

(subscribe to this query)

Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 up to and including 11.0 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuu34121.

Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 11.0.0 Cisco Prime Collaboration Assurance 10.6.0

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and ...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.6.0

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus6...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 10.6.0

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing ...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.6.0 Cisco Prime Collaboration Assurance 10.5.1

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5...

Cisco Prime Collaboration Assurance 10.6.0 Cisco Prime Collaboration Assurance 10.5.1

Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCus62712.

Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 10.6.0

The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380.

Cisco Prime Collaboration Assurance 10.5.1

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887.

Cisco Prime Collaboration Assurance 10.5.1

Cisco Prime Collaboration Assurance prior to 11.0 has a hardcoded cmuser account, which allows remote malicious users to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.

Cisco Prime Collaboration Assurance 10.6.0 Cisco Prime Collaboration Assurance 10.5.1

1 Article

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04

1 Github repository

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook