Cisco Prime Collaboration Deployment vulnerabilities

3 CVEs affecting Cisco Prime Collaboration Deployment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20060, published 2024-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1437, published 2016-06-23. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID…
CVE-2023-20259, published 2023-10-04. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the…
CVE-2023-20060, published 2024-11-15. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Collaboration Deployment could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user…