Priority LOW 25
The ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (temporary HTTP service outage) via a flood of TCP packets, aka Bug ID CSCuh36313.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01232 · Published 2013-11-06 · No fix listed CWE-119
Priority LOW 26
The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (process crash) via a flood of TCP packets, aka Bug ID CSCug57345.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01766 · Published 2013-11-04 · No fix listed CWE-119
Priority LOW 20
The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to r…
CVSS 2.0MEDIUM 4.3· Local · Low privileges · Interaction — · EPSS 0.00281 · Published 2013-10-10 · No fix listed CWE-255
Priority LOW 25
The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote at…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01186 · Published 2013-06-26 · No fix listed CWE-200
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00942 · Published 2013-06-14 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00942 · Published 2013-05-01 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified pa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00942 · Published 2013-05-01 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspec…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00942 · Published 2013-05-01 · No fix listed CWE-79
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01378 · Published 2013-05-01 · No fix listed CWE-79
Priority LOW 27
Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0204 · Published 2013-05-01 · No fix listed CWE-22