Cisco Prime Collaboration Assurance vulnerabilities

20 CVEs affecting Cisco Prime Collaboration Assurance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1856, published 2019-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0321, published 2018-06-07. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to…
CVE-2015-4304, published 2015-09-20. High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days. The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read…
CVE-2015-6389, published 2015-12-13. High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this…
CVE-2015-4306, published 2015-09-20. High severity, CVSS 8.5. EPSS: 2.3% chance of exploitation in the next 30 days. The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of…
CVE-2017-6779, published 2018-06-07. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to…
CVE-2015-4305, published 2015-09-20. Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days. The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP…
CVE-2015-6328, published 2015-10-13. Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days. The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID…
CVE-2016-9200, published 2016-12-14. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the…
CVE-2018-0458, published 2018-10-05. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2019-1662, published 2019-02-21. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid…

Latest

CVE-2019-1856, published 2019-05-03. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
CVE-2018-15438, published 2018-10-17. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…
CVE-2018-0141, published 2018-03-08. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is…
CVE-2017-6659, published 2017-06-13. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…
CVE-2017-3845, published 2017-02-22. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2017-3844, published 2017-02-22. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files.…