CVE-2026-76432: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

CVE-2024-13723

The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP...

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

PT-2020-3111

Name of the Vulnerable Software and Affected Versions Cisco Prime License Manager PLM Software affected versions not specified Description A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthoriz...

Input validation

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...

CVE-2018-0319

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...

CVE-2018-0318

Cisco Prime Collaboration Provisioning (PCP) Password Reset Vulnerability (CVE-2018-0318) allows an unauthenticated, remote attacker to gain administrative privileges by abusing weak validation in the password reset function. Affected releases: PCP 11.6 and prior. The issue stems from insufficien...

CVE-2018-0319: Improper Authentication

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...

PT-2018-8748

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions 11.6 and prior Description A vulnerability in the password reset function could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The issue is due t...

PT-2018-8749

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions 11.6 and prior Description A vulnerability in the password recovery function could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The issue is du...