Cisco Prime_collaboration_assurance
20 CVEs affecting Cisco Prime_collaboration_assurance. Latest disclosed: 2019-05-03. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0321 | Critical | 9.8 | 2018-06-07 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RM… |
CVE-2017-6659 | High | 8.8 | 2017-06-13 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross… |
CVE-2018-0141 | High | 8.4 | 2018-03-08 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux… |
CVE-2019-1662 | High | 8.2 | 2019-02-21 | A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote a… |
CVE-2017-6779 | High | 7.5 | 2018-06-07 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow… |
CVE-2016-1392 | High | 7.4 | 2016-05-05 | Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites… |
CVE-2018-15438 | Medium | 6.5 | 2018-10-17 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross… |
CVE-2019-1856 | Medium | 6.1 | 2019-05-03 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a… |
CVE-2018-0458 | Medium | 6.1 | 2018-10-05 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross… |
CVE-2017-3845 | Medium | 6.1 | 2017-02-22 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross… |
CVE-2016-9200 | Medium | 6.1 | 2016-12-14 | A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site script… |
CVE-2017-3844 | Medium | 4.3 | 2017-02-22 | A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file… |
CVE-2017-3843 | Medium | 4.3 | 2017-02-22 | A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files t… |
CVE-2015-6389 | | 2015-12-13 | Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session a… | |
CVE-2015-6330 | | 2015-11-18 | Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of… | |
CVE-2015-6328 | | 2015-10-13 | The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitr… | |
CVE-2015-6331 | | 2015-10-12 | SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL comm… | |
CVE-2015-4306 | | 2015-09-20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrict… | |
CVE-2015-4305 | | 2015-09-20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restri… | |
CVE-2015-4304 | | 2015-09-20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and cr… |