Cisco Prime Central For Hosted Collaboration Solution vulnerabilities

10 CVEs affecting Cisco Prime Central For Hosted Collaboration Solution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5562, published 2013-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1156, published 2013-05-01. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034.
CVE-2013-5564, published 2013-11-04. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (process crash) via a flood of TCP packets,…
CVE-2013-1157, published 2013-05-01. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary…
CVE-2013-5562, published 2013-11-06. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (temporary HTTP service outage) via a flood of TCP packets, aka…
CVE-2013-3398, published 2013-06-26. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists,…
CVE-2013-3375, published 2013-06-14. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL,…
CVE-2013-1160, published 2013-05-01. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an…
CVE-2013-1159, published 2013-05-01. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML…
CVE-2013-1158, published 2013-05-01. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script…
CVE-2013-3409, published 2013-10-10. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak…