Cisco Prime Collaboration Provisioning logconfigtracer.jsp Directory Traversal (CVE-2017-6621)

An information disclosure vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to logconfigtracer.jsp page. A remote, unauthenticated attacker can exploit this vulnerability by sending a...

CVE-2015-6329

CVE-2015-6329 corresponds to a SQL injection vulnerability in Cisco Prime Collaboration Provisioning (PCP). The issue affects PCP 10.6.x and 11.0.x prior to 11.0.0.815 (per Nessus) and Cisco’s advisory describes an authenticated, remote attacker able to execute unauthorized SQL queries via the we...