PC
Product
Prime Collaboration Provisioning
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 17Low 0
Watch
Add Prime Collaboration Provisioning to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0321 | 9.8 | Jun 7 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system Affected: through 11.6 |
| CVE-2018-0320 | 9.8 | Jun 7 | A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries Affected: through 12.1 |
| CVE-2018-0319 | 9.8 | Jun 7 | A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an… Affected: through 11.6 |
| CVE-2018-0318 | 9.8 | Jun 7 | A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an… Affected: through 11.6 |
| CVE-2017-6622 | 9.8 | May 18 | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +4 more |
| CVE-2016-1416 | 9.8 | Jul 2 | Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted… Affected: 10.6.2 |
| CVE-2018-0322 | 8.8 | Jun 7 | A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is… Affected: through 12.1 |
| CVE-2018-0317 | 8.8 | Jun 7 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges Affected: through 12.2 |
| CVE-2017-6756 | 8.8 | Aug 7 | A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, remote attacker to execute unwanted… Affected: 12.2 |
| CVE-2018-0141 | 8.4 | Mar 8 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system Affected: 11.6 |
| CVE-2017-12276 | 8.1 | Nov 2 | A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to… Affected: before 12.3 |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 12.5 |
| CVE-2018-0204 | 7.5 | Feb 22 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition… Affected: 12.1 |
| CVE-2017-6621 | 7.5 | May 18 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +4 more |
| CVE-2020-3184 | 7.2 | May 22 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection… Affected: before 12.6; 12.6; 12.6 |
| CVE-2018-0391 | 6.5 | Aug 1 | A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable Affected: through 12.2 |
| CVE-2017-6793 | 6.5 | Sep 7 | A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on… Affected: All versions, or not specified |
| CVE-2017-6792 | 6.5 | Sep 7 | A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root Affected: All versions, or not specified |
| CVE-2017-6759 | 6.5 | Aug 7 | A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the… Affected: 12.1 |
| CVE-2017-6704 | 6.5 | Jul 4 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that… Affected: 12.1 |
| CVE-2017-6637 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +2 more |
| CVE-2017-6636 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +2 more |
| CVE-2017-6635 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker to delete any file… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +4 more |
| CVE-2021-34732 | 6.1 | Sep 2 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: through 12.6_su3\(1\) |
| CVE-2020-3192 | 6.1 | Mar 4 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: before 12.6; 12.6; 12.6 |
| CVE-2018-0205 | 6.1 | Feb 22 | A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 12.1 |
| CVE-2017-6755 | 6.1 | Jul 25 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 12.1 |
| CVE-2016-6451 | 6.1 | Nov 3 | Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 10.6.0 |
| CVE-2017-6703 | 5.9 | Jul 4 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session Affected: 11.2_base; 11.5.0; 11.6_base; 12.1_base |
| CVE-2017-6705 | 5.5 | Jul 4 | A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information Affected: 12.1 |
| CVE-2020-3193 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information… Affected: before 12.6; 12.6; 12.6 |
| CVE-2017-6706 | 5.1 | Jul 4 | A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information Affected: 11.2_base; 11.5.0; 11.6_base; 12.1_base |
| CVE-2015-6329 | – | Oct 12 | SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,… Affected: 10.6.0; 11.0.0 |
| CVE-2015-4307 | – | Sep 20 | The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0 |
Showing 34