cisco prime collaboration vulnerabilities and exploits

(subscribe to this query)

8.5

CVSSv2

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing ...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.6.0 Cisco Prime Collaboration Assurance 10.5.1

9

CVSSv2

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and ...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.6.0

9

CVSSv2

The web framework in Cisco Prime Collaboration Provisioning prior to 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.

Cisco Prime Collaboration Provisioning 10.0.0 Cisco Prime Collaboration Provisioning 10.5.0 Cisco Prime Collaboration Provisioning 10.6.0 Cisco Prime Collaboration Provisioning 10.5.1 Cisco Prime Collaboration Provisioning 9.0.0 Cisco Prime Collaboration Provisioning 9.5.0

4

CVSSv2

The web framework in Cisco Prime Collaboration Assurance prior to 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus6...

Cisco Prime Collaboration Assurance 9.0.0 Cisco Prime Collaboration Assurance 9.5.0 Cisco Prime Collaboration Assurance 10.0.0 Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 10.6.0

5.8

CVSSv2

Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 up to and including 11.0 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuu34121.

Cisco Prime Collaboration Assurance 10.5.0 Cisco Prime Collaboration Assurance 10.5.1 Cisco Prime Collaboration Assurance 11.0.0 Cisco Prime Collaboration Assurance 10.6.0

4

CVSSv2

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment prior to 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549.

Cisco Prime Collaboration Deployment 11.5.0 Cisco Prime Collaboration Deployment 11.0 Base Cisco Prime Collaboration Deployment 10.5.1 Cisco Prime Collaboration Deployment 10.5.0

6.8

CVSSv2

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286.

Cisco Prime Collaboration 9.0.5 Cisco Prime Collaboration 11.0.0 Cisco Prime Collaboration 9.0.0

4

CVSSv2

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote malicious user to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.5(0).

Cisco Prime Collaboration Assurance 11.1.0 Cisco Prime Collaboration Assurance 11.5.0 Cisco Prime Collaboration Assurance 11.0.0

4

CVSSv2

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote malicious user to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11...

Cisco Prime Collaboration Assurance 11.0.0 Cisco Prime Collaboration Assurance 11.1.0 Cisco Prime Collaboration Assurance 11.5.0

4.3

CVSSv2

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. Affected P...

Cisco Prime Collaboration Assurance 11.1.0 Cisco Prime Collaboration Assurance 11.5.0 Cisco Prime Collaboration Assurance 11.0.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook