cisco prime collaboration deployment 10.5.1 vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment prior to 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549.

Cisco Prime Collaboration Deployment 11.5.0 Cisco Prime Collaboration Deployment 11.0 Base Cisco Prime Collaboration Deployment 10.5.1 Cisco Prime Collaboration Deployment 10.5.0

5

CVSSv2

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote malicious user to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insuffi...

Cisco Prime Collaboration Provisioning 11.1.0 Cisco Prime Collaboration Provisioning 10.5.1 Cisco Prime Collaboration Provisioning 9.5.0 Cisco Prime Collaboration Provisioning 9.0.0 Cisco Prime Collaboration Provisioning 10.6.0 Cisco Prime Collaboration Provisioning 11.5.0 Cisco Prime Collaboration Provisioning 10.5.0 Cisco Prime Collaboration Provisioning 10.6.2 Cisco Prime Collaboration Provisioning 10.0.0 Cisco Prime Collaboration Provisioning 11.0.0

10

CVSSv2

A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote malicious user to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain H...

Cisco Prime Collaboration Provisioning 9.5.0 Cisco Prime Collaboration Provisioning 9.0.0 Cisco Prime Collaboration Provisioning 11.1.0 Cisco Prime Collaboration Provisioning 10.5.1 Cisco Prime Collaboration Provisioning 10.5.0 Cisco Prime Collaboration Provisioning 10.6.2 Cisco Prime Collaboration Provisioning 11.0.0 Cisco Prime Collaboration Provisioning 10.6.0 Cisco Prime Collaboration Provisioning 11.5.0 Cisco Prime Collaboration Provisioning 10.0.0

1 EDB exploit

5

CVSSv2

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04

1 Github repository

5

CVSSv2

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d

1 Article

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook