PT-2017-17224

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.50 through 11.6 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CNVD-2017-13764)

Cisco Prime Collaboration Assurance is a set of enterprise collaboration network management solutions from the U.S. company Cisco Cisco. A cross-site request forgery vulnerability exists in Cisco Prime Collaboration Assurance. It allows a remote attacker to hijack the authentication of arbitrary...

Cisco Prime Collaboration Assurance Multiple Vulnerabilities (Mar 2017)

cisco prime collaboration assurance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SMBv1 Vulnerability

Microsoft has released a security update to address a vulnerability in implementations of Server Message Block 1.0 SMBv1. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Microsoft Securit...

CVE-2017-3844

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

Design/Logic Flaw

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.50...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3843

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.50...

Design/Logic Flaw

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

CVE-2017-3845

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3843

Cisco Prime Collaboration Assurance is affected by CVE-2017-3843. The vulnerability resides in the product’s file download functions and stems from a lack of proper input validation of HTTP requests, allowing an authenticated, remote attacker to download restricted system files. The known affecte...

CVE-2017-3844

Cisco Prime Collaboration Assurance contains a directory listing vulnerability (CVE-2017-3844) that could allow an authenticated remote attacker to enumerate and download files via crafted HTTP requests. Affected firmware: PCP versions 11.0, 11.1, and 11.5 (11.5(0) specifically listed); releases ...

CVE-2017-3845

CVE-2017-3845 concerns a cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance. Affected: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 (11.5(0) affected); earlier than 11.0 not vulnerable. Root cause: in...

CVE-2017-3845

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3843: Improper Input Validation

A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to download system files that should be restricted. More Information: CSCvc99446. Known Affected Releases: 11.50...

PT-2017-16140

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.0 through 11.5 Description A vulnerability in the exporting functions of the user interface could allow an authenticated, remote attacker to view file directory listings and download files...

CVE-2017-3845: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3844: Improper Input Validation

A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...

PT-2017-16139

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance version 11.50 Description A vulnerability in the file download functions could allow an authenticated, remote attacker to download system files that should be restricted. Recommendations For Cisco Prime...

PT-2017-16141

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 11.0 through 11.5 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...