What is CVE-2015-0697?

CVE-2015-0697 is a vulnerability in Cisco Telepresence Tc Software, classified under URL Redirection to Untrusted Site (Open Redirect). Published 2015-04-15.

Is CVE-2015-0697 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Open Redirect in Cisco Telepresence Tc Software

CVE-2015-0697

Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.

Vulnerability class: Open Redirect

Published 2015-04-15 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 5.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.019 (78.4th percentile), scored 2026-10-01.

Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 78.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.019 · newest: 0.019 · change: 0.000

Affected products

Cisco Telepresence Tc Software — versions 6.0.0, 6.0.0-cucm, 6.0.1

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

www.securitytracker.com/id/1032136 (VDB Entry, Third Party Advisory, vdb-entry)
tools.cisco.com/security/center/viewAlert.x (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2015-0697?: CVE-2015-0697 is a vulnerability in Cisco Telepresence Tc Software, classified under URL Redirection to Untrusted Site (Open Redirect). Published 2015-04-15.
Is CVE-2015-0697 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.