CVE-2015-6303: Cisco Spark

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844.

Affected products

• Cisco Spark: version 2015-07-04_base only

Published 2015-09-24. Last modified 2026-06-17.