PC
Product
Prime Collaboration Provisioning
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 17Low 0
Watch
Add Prime Collaboration Provisioning to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0391 | 6.5 | Aug 1 | A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable Affected: through 12.2 |
| CVE-2017-6793 | 6.5 | Sep 7 | A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to view sensitive information on… Affected: All versions, or not specified |
| CVE-2017-6792 | 6.5 | Sep 7 | A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to overwrite system files as root Affected: All versions, or not specified |
| CVE-2017-6759 | 6.5 | Aug 7 | A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the… Affected: 12.1 |
| CVE-2017-6704 | 6.5 | Jul 4 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that… Affected: 12.1 |
| CVE-2017-6637 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to delete any file… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +2 more |
| CVE-2017-6636 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticated, remote attacker to view any file on… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +2 more |
| CVE-2017-6635 | 6.5 | May 22 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticated, remote attacker to delete any file… Affected: 9.0.0; 9.5.0; 10.0.0; 10.5.0; 10.5.1; 10.6.0; +4 more |
| CVE-2021-34732 | 6.1 | Sep 2 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: through 12.6_su3\(1\) |
| CVE-2020-3192 | 6.1 | Mar 4 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: before 12.6; 12.6; 12.6 |
| CVE-2018-0205 | 6.1 | Feb 22 | A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 12.1 |
| CVE-2017-6755 | 6.1 | Jul 25 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 12.1 |
| CVE-2016-6451 | 6.1 | Nov 3 | Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting… Affected: 10.6.0 |
| CVE-2017-6703 | 5.9 | Jul 4 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session Affected: 11.2_base; 11.5.0; 11.6_base; 12.1_base |
| CVE-2017-6705 | 5.5 | Jul 4 | A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information Affected: 12.1 |
| CVE-2020-3193 | 5.3 | Mar 4 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information… Affected: before 12.6; 12.6; 12.6 |
| CVE-2017-6706 | 5.1 | Jul 4 | A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information Affected: 11.2_base; 11.5.0; 11.6_base; 12.1_base |
Showing 17