CVE-2018-0322

CVE-2018-0322 affects Cisco Prime Collaboration Provisioning (PCP) — releases up to 12.1. The issue is an access-control flaw in the web management interface, where authentication for Help Desk and User Provisioning roles is not properly enforced, allowing an authenticated attacker to modify priv...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

CVE-2018-0322

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

CVE-2018-0319

CVE-2018-0319 affects Cisco Prime Collaboration Provisioning (PCP) Password Recovery. The root cause is insufficient validation of a password recovery request, allowing an unauthenticated remote attacker to submit a recovery request, change the password for any user, and potentially gain administ...

CVE-2018-0318

Cisco Prime Collaboration Provisioning (PCP) Password Reset Vulnerability (CVE-2018-0318) allows an unauthenticated, remote attacker to gain administrative privileges by abusing weak validation in the password reset function. Affected releases: PCP 11.6 and prior. The issue stems from insufficien...

CVE-2018-0317

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an...

Cisco Prime Collaboration Provisioning Authorization Issues Vulnerability

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. An authorization issue vulnerability exists ...

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability (CNVD-2018-11307)

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. An access control bypass vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning PCP. The...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (CNVD-2018-11254)

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A SQL injection vulnerability exists in the...

Cisco Prime Collaboration Provisioning Password Recovery Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...

Cisco Prime Collaboration Provisioning Access Control Vulnerability

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A privilege-granting and access control...

Cisco Prime Collaboration Provisioning Elevation of Privilege Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. An elevation of privilege vulnerability exists in the batch configuration feature in Cisco Prime Collaboration...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...

Cisco Prime Collaboration Provisioning Access Control Deficiency in Batch Function Privilege Escalation Vulnerability

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could...

Cisco Prime Collaboration Provisioning Unauthenticated Remote Method Invocation Vulnerability

A vulnerability in Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system. The vulnerability is due to an open port in the Network Interface and Configuration Engine NICE service. An attacker could exploit...

Cisco Prime Collaboration Provisioning Access Control Vulnerability

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an...

Hardcoded credentials

A vulnerability in Cisco Prime Collaboration Provisioning PCP Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by...

CVE-2018-0141

A vulnerability in Cisco Prime Collaboration Provisioning PCP Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by...

CVE-2018-0141

A vulnerability in Cisco Prime Collaboration Provisioning PCP Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by...