PT-2015-6488

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution version 10.61 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL. Recommendations For Cisco Hosted Collaboration Solution...

CVE-2015-4260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Hosted Collaboration Solution 10.61 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862...

Cisco Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in Cisco Hosted Collaboration Solution could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to...

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Request Forgery Vulnerability

Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A cross-site request forgery vulnerability exists in Cisco Prime Central for Hosted Collaboration...

Cisco Hosted Collaboration Solution Arbitrary Command Execution Vulnerability

Cisco Hosted Collaboration Solution HCS is a suite of hosted collaboration solutions. The solution includes Cisco TelePresence, Customer Collaboration and Unified Communications products to support customers using collaboration technologies in public, private and hybrid cloud models. A security...

CVE-2015-0750

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

Design/Logic Flaw

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

CVE-2015-0750

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

PT-2015-4861

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS versions 10.61 and earlier Description The administrative web interface in Cisco Hosted Collaboration Solution HCS allows remote authenticated users to execute arbitrary commands via crafted input to...

CVE-2015-0750: Undefined Security Weakness

The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...

CVE-2015-0741

CVE-2015-0741 affects Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions down to 10.6(1) and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities (Bug ID CSCut04596) that could allow remote attackers to hijack the authentication of arbitrary users....

PT-2015-4856

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution PC4HCS versions 10.61 and earlier Description The issue allows remote attackers to hijack the authentication of arbitrary users due to multiple cross-site request forgery CSRF...

CVE-2015-0741: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...

Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP Interface of the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted system. An attacker could exploit the vulnerability by transmitting crafted Challenge SOAP...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626: Improper Input Validation

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

PT-2015-4769

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS affected versions not specified Description The issue concerns the SOAP interface in Cisco Hosted Collaboration Solution HCS, which allows remote attackers to gain access to system-management tools by...

Cisco Hosted Collaboration Solution (HCS)拒绝服务漏洞

CVE ID: CVE-2014-2122 Cisco Hosted Collaboration Solution HCS是一种云服务，可提供通讯和合作解决方案。 Cisco Hosted Collaboration Solution HCS内的Impack服务器中，GUI内存在内存泄露漏洞，可使远程攻击者造成拒绝服务。 0 Cisco Hosted Collaboration Solution HCS 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...