Lucene search
HistoryMay 30, 2015 - 2:59 p.m.
CVE-2015-0758
cisco
unified meetingplace
cve-2015-0758
web-based
security
vulnerability
xml
xxe
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.0%
The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.
Affected configurations
Node
ciscounified_meetingplaceMatch8.6\(1.9\)
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:unified_meetingplace | cisco unified meetingplace | eq | 8.6\(1.9\) |
Related
cvelist
cvelist
CVE-2015-0758
2015-05-30 14:00:00
nessus
nessus
prion
prion
Xxe
2015-05-30 14:59:00
cisco
cisco
nvd
nvd
CVE-2015-0758
2015-05-30 14:59:05
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.0%
Related for CVE-2015-0758