Cisco Prime Service Catalog
16 CVEs affecting Cisco Prime Service Catalog. Latest disclosed: 2022-02-10. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44228 | Critical | 10.0 | 2021-12-10 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
CVE-2019-1874 | High | 8.8 | 2019-06-20 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cros… |
CVE-2018-0107 | High | 8.8 | 2018-01-18 | A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected… |
CVE-2018-0285 | Medium | 6.5 | 2018-05-02 | A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vul… |
CVE-2017-12364 | Medium | 6.5 | 2017-11-30 | A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Struc… |
CVE-2018-0200 | Medium | 6.1 | 2018-02-22 | A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scr… |
CVE-2017-3866 | Medium | 6.1 | 2017-03-17 | A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS… |
CVE-2016-1462 | Medium | 6.1 | 2016-07-28 | Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbi… |
CVE-2018-15451 | Medium | 5.4 | 2018-11-08 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scri… |
CVE-2017-3810 | Medium | 5.4 | 2017-02-03 | A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against… |
CVE-2019-1875 | Medium | 4.8 | 2019-06-20 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scri… |
CVE-2022-20680 | Medium | 4.3 | 2022-02-10 | A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive informat… |
CVE-2015-6395 | | 2015-12-12 | Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configur… | |
CVE-2015-6350 | | 2015-10-30 | SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via un… | |
CVE-2015-4190 | | 2015-06-17 | Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vec… | |
CVE-2015-0581 | | 2015-01-28 | The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memor… |