Cisco Prime_collaboration_provisioning

19 CVEs affecting Cisco Prime_collaboration_provisioning. Latest disclosed: 2017-11-02. Critical: 2, High: 3.

Top CVEs affecting Cisco Prime_collaboration_provisioning
CVESeverityScorePublishedSummary
CVE-2017-6622Critical9.82017-05-18A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and pe…
CVE-2016-1416Critical9.82016-07-02Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privil…
CVE-2017-6756High8.82017-08-07A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to ex…
CVE-2017-12276High8.12017-11-02A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated…
CVE-2017-6621High7.52017-05-18A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The at…
CVE-2017-6793Medium6.52017-09-07A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensit…
CVE-2017-6792Medium6.52017-09-07A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite sys…
CVE-2017-6759Medium6.52017-08-07A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary…
CVE-2017-6704Medium6.52017-07-04A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary fi…
CVE-2017-6637Medium6.52017-05-22A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker t…
CVE-2017-6636Medium6.52017-05-22A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker t…
CVE-2017-6635Medium6.52017-05-22A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker t…
CVE-2017-6755Medium6.12017-07-25A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-s…
CVE-2016-6451Medium6.12016-11-03Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a c…
CVE-2017-6703Medium5.92017-07-04A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another use…
CVE-2017-6705Medium5.52017-07-04A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive informat…
CVE-2017-6706Medium5.12017-07-04A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive…
CVE-2015-63292015-10-12SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via uns…
CVE-2015-43072015-09-20The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create adm…