HC
Product
Hosted Collaboration Solution
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Hosted Collaboration Solution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9805 In wildKEV | 8.1 | Sep 15 | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type… Affected: 10.5(1); 11.0(1); 11.5(1); 11.6(1) |
| CVE-2017-12337 | 9.8 | Nov 16 | A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified |
| CVE-2019-1911 | 7.8 | Jul 6 | A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell Affected: through 11.5\(3\)pb3 |
| CVE-2018-0386 | 6.1 | Aug 15 | A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an… Affected: 11.5(1) |
| CVE-2019-15968 | 5.4 | Nov 26 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a… Affected: 8.1(8)er1 |
| CVE-2015-6404 | – | Dec 15 | Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin… Affected: 10.6(3)_base |
| CVE-2015-6352 | – | Oct 30 | Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows… Affected: 10.6_base |
| CVE-2015-4260 | – | Jul 10 | Cross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a… Affected: 10.6(1)_base |
| CVE-2015-0750 | – | May 23 | The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input… Affected: 8.0(2)_base; 8.6(1)_base; 8.6(2)_base; 9.0(1)_base; 9.1(1)_base; 9.2(1)_base; +6 more |
| CVE-2015-0741 | – | May 21 | Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack… Affected: through 10.6\(1\) |
| CVE-2015-0626 | – | Feb 19 | The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID… Affected: All versions, or not specified |
| CVE-2014-2122 | – | Mar 19 | Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified… Affected: All versions, or not specified |
| CVE-2014-2121 | – | Mar 19 | The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug… Affected: All versions, or not specified |
| CVE-2013-3381 | – | Jun 12 | Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756 Affected: All versions, or not specified |
| CVE-2013-1174 | – | Apr 5 | Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service… Affected: All versions, or not specified |
Showing 15