Cisco Collaboration Server vulnerabilities

2 CVEs affecting Cisco Collaboration Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0642, published 2010-02-17.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0642, published 2010-02-17. Medium severity, CVSS 5.0. EPSS: 7.7% chance of exploitation in the next 30 days. Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by (1) changing .jhtml to…
• CVE-2010-0641, published 2010-02-17. Medium severity, CVSS 4.3. EPSS: 3.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attackers to inject arbitrary web script or HTML via the dest…