PC
Product
Prime Collaboration Assurance
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 7Low 0
Watch
Add Prime Collaboration Assurance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0321 | 9.8 | Jun 7 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system Affected: through 11.6 |
| CVE-2019-1662 | 9.1 | Feb 21 | Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability Affected: before 12.1; 12.1; 12.1 |
| CVE-2017-6659 | 8.8 | Jun 13 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 11.5(0); 11.6 |
| CVE-2018-0141 | 8.4 | Mar 8 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system Affected: 11.6 |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.6 before 11.6_es16; 12.1 before 12.1_es2 |
| CVE-2016-1392 | 7.4 | May 5 | Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Affected: 10.5.0; 10.5.1; 10.6.0; 11.0.0 |
| CVE-2018-15438 | 6.5 | Oct 17 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request… Affected: 12.1 |
| CVE-2019-1856 | 6.1 | May 3 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 12.1 |
| CVE-2018-0458 | 6.1 | Oct 5 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 11.6.0 |
| CVE-2017-3845 | 6.1 | Feb 22 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 11.0.0; 11.1.0; 11.5.0 |
| CVE-2016-9200 | 6.1 | Dec 14 | A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 10.5.1; 10.6.0 |
| CVE-2017-3844 | 4.3 | Feb 22 | A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings… Affected: 11.0.0; 11.1.0; 11.5.0 |
| CVE-2017-3843 | 4.3 | Feb 22 | A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be… Affected: 11.0.0; 11.1.0; 11.5.0 |
| CVE-2015-6389 | – | Dec 13 | Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging… Affected: 10.5.1; 10.6.0 |
| CVE-2015-6330 | – | Nov 18 | Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users,… Affected: 10.5.1; 10.6.0 |
| CVE-2015-6328 | – | Oct 13 | The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a… Affected: 10.5.1 |
| CVE-2015-6331 | – | Oct 12 | SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified… Affected: 10.5.1 |
| CVE-2015-4306 | – | Sep 20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0 |
| CVE-2015-4305 | – | Sep 20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0 |
| CVE-2015-4304 | – | Sep 20 | The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0 |
Showing 20