Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

18 records in Prime Collaboration · all components

Priority MEDIUM 56

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03924 Published 2018-06-07 No fix listed CWE-89
Priority MEDIUM 55

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.035 Published 2018-06-07 No fix listed CWE-287
Priority MEDIUM 54

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03053 Published 2018-06-07 No fix listed CWE-255
Priority MEDIUM 54

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03053 Published 2018-06-07 No fix listed CWE-255
Priority MEDIUM 52

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and p…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01511 Published 2018-10-05 No fix listed CWE-255
Priority MEDIUM 45

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02336 Published 2018-06-07 No fix listed CWE-264
Priority MEDIUM 45

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affe…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02539 Published 2018-06-07 No fix listed CWE-264
Priority MEDIUM 45

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02561 Published 2018-06-07 No fix listed CWE-264
Priority LOW 39

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system.

CVSS 3.0HIGH 8.4 Local No auth No interaction EPSS 0.00417 Published 2018-03-08 No fix listed CWE-798
Priority LOW 36

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00405 Published 2018-06-07 No fix listed CWE-200
Priority LOW 34

A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02538 Published 2018-11-08 No fix listed CWE-20
Priority LOW 34

A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0268 Published 2018-08-01 No fix listed CWE-285
Priority LOW 30

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.003 Published 2013-04-29 No fix listed CWE-20
Priority LOW 30

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Co…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.003 Published 2013-02-19 No fix listed CWE-20
Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02082 Published 2013-12-03 No fix listed CWE-79
Open these records in search →