5354 matches found
CVE-2018-15389 Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability
A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...
CVE-2018-15389 Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability
A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...
CVE-2018-0458 Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15401 Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...
CVE-2018-15389
Cisco Prime Collaboration Provisioning (PCP) contains a vulnerability in its install function that allows an unauthenticated, remote attacker to reach the administrative web interface by using a default hard-coded username/password used during install. This can grant administrator-level access. M...
CVE-2018-0458
CVE-2018-0458 affects Cisco Prime Collaboration Assurance (PCA) web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to conduct a cross-site scripting (XSS) attack by tricking a user into clicking a...
CVE-2018-15401
The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...
PT-2018-8841
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...
PT-2018-13013
Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF...
CVE-2018-0458: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2018-15389: Use of Hard-coded Credentials
A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...
CVE-2018-15401: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...
Information disclosure
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control...
CVE-2018-17872
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...
CVE-2018-17872
Verba Collaboration Compliance and Quality Management Platform (Product by Verint/Verba) before version 9.2.1.5545 has Insecure Permissions (Improper Access Control). Public advisories and CVE entries indicate affected versions include
CVE-2018-17871
The CVE-2018-17871 entry describes an Improper Access Control (CWE-284) in Verba Collaboration Compliance and Quality Management Platform. Affected versions are before 9.2.1.5545 (tested
CVE-2018-17872: Incorrect Permission Assignment for Critical Resource
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...
PT-2018-14238
Name of the Vulnerable Software and Affected Versions Verba Collaboration Compliance and Quality Management Platform versions prior to 9.2.1.5545 Description The issue is related to Incorrect Access Control, which may allow unauthorized access to certain features or data. Recommendations For...
PT-2018-14239
Name of the Vulnerable Software and Affected Versions Verba Collaboration Compliance and Quality Management Platform versions prior to 9.2.1.5545 Description The issue is related to insecure permissions in the Verba Collaboration Compliance and Quality Management Platform. Recommendations For...