Cisco Prime Collaboration vulnerabilities

18 CVEs affecting Cisco Prime Collaboration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15450, published 2018-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0320, published 2018-06-07. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to…
CVE-2018-0321, published 2018-06-07. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to…
CVE-2018-0319, published 2018-06-07. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.…
CVE-2018-0318, published 2018-06-07. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The…
CVE-2018-0391, published 2018-08-01. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is…
CVE-2018-0317, published 2018-06-07. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to…
CVE-2018-0322, published 2018-06-07. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is associated with…
CVE-2018-15450, published 2018-11-08. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to…
CVE-2015-4280, published 2015-07-18. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service (HTTP service outage) via a crafted HTTP request, aka Bug ID CSCum38844.
CVE-2018-0336, published 2018-06-07. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The…

Latest

CVE-2018-15389, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default…
CVE-2018-0335, published 2018-06-07. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data. The vulnerability is due to…