Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Prime Central For Hosted Collaboration Solution · all components

Priority LOW 25

The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01186 Published 2013-06-26 No fix listed CWE-200
Priority LOW 23

Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01378 Published 2013-05-01 No fix listed CWE-79
Priority LOW 22

Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00942 Published 2013-05-01 No fix listed CWE-79
Priority LOW 22

Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00942 Published 2013-05-01 No fix listed CWE-79
Priority LOW 20

The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to r…

CVSS 2.0MEDIUM 4.3 Local Low privileges Interaction — EPSS 0.00281 Published 2013-10-10 No fix listed CWE-255
Open these records in search →