CVE-2017-6706

The CVE-2017-6706 entry concerns a vulnerability in the logging subsystem of Cisco Prime Collaboration Provisioning Tool that could allow an unauthenticated, local attacker to access sensitive information. Affected behavior is described as information disclosure via log files; the issue stems fro...

CVE-2017-6703

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1...

CVE-2017-6706

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1...

Shenzhen Cloud Box Technology Co., Ltd. cloud platform exists s2-045 command execution vulnerability

Cloudbox is a private cloud storage platform for enterprise document aggregation, distribution monitoring and collaboration based on mobile networks. Shenzhen Cloud Box Technology Co., Ltd. cloud platform using Apache as the framework, the framework exists s2-045 command execution vulnerability...

Cross-site Scripting Vulnerability in multiple Hitachi products

Overview A cross-site scripting vulnerability was found in uCosminexus Portal Framework, Groupmax Collaboration, Hitachi Navigation Platform and JP1/Navigation Platform. Impact Remote users can exploit this vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor...

Cisco Prime Collaboration Provisioning Tool Local Information Disclosure Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A security vulnerability exists in the file system in the Cisco Prime Collaboration Provisioning tool where an authenticated local attacker obtains sensitive information...

Cisco Prime Collaboration Provisioning ScriptMgr Servlet Authentication Bypass Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ScriptMgr servlet, which listens on TCP port 443 by default...

Cisco Prime Collaboration Provisioning Logs Directory Improper Access Control Information Disclosure Vulnerability

This vulnerability allows disclose sensitive information on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the service that listens on TCP port 443 by default. Access to the /logs/cu...

Cisco Prime Collaboration Provisioning Arbitrary File Download Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A security vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool allows an unauthenticated, remote attacker to download arbitrary files and read files within the...

Cisco Prime Collaboration Provisioning licensestatus Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the licensestatus.jsp page, which listens on TCP port 443 by...

Cisco Prime Collaboration Provisioning logconfigtracer Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logconfigtracer.jsp page, which listens on TCP port 443 by...

Cisco Prime Collaboration Provisioning Tool Session Hijacking Vulnerability

Cisco Prime Collaboration Provisioning tool is a set of Web-based, next-generation communications services tools from Cisco. The tool provides IP communication services capabilities for IP telephony, voice mail and unified communications environments. A session hijacking vulnerability exists in t...

Cisco Prime Collaboration Provisioning logconfigtracer Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco Prime Collaboration Provisioning. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logconfigtracer.jsp page, which listens on TCP port...

The vulnerability of the Session Initiation Protocol (SIP) microprogramming software for Cisco TelePresence Codec Software and Cisco Collaboration Endpoint (CE) Software allows attackers to manipulate the accessibility of services and information, thereby causing service failures.

The vulnerability of the Session Initiation Protocol SIP microprogramming software for Cisco TelePresence Codec Software and Cisco Collaboration Endpoint CE Software is related to resource management errors. Exploiting this vulnerability allows a malicious actor to manipulate service availability...

Cisco Prime Collaboration Provisioning Tool Arbitrary File Download Vulnerability

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. The vulnerability is due to insufficient input...

Cisco Prime Collaboration Provisioning Tool Log File Information Disclosure Vulnerability

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. The vulnerability is due to the logging of sensitive details of specific user actions. An attacker could exploit this...

Cisco Prime Collaboration Provisioning Tool Session Hijacking Vulnerability

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. The vulnerability is due to insufficient session management during user authentication. An attacker could exploit this...

Cisco Prime Collaboration Provisioning Tool Information Disclosure Vulnerability

A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. The vulnerability is due to insecure file permissions. A successful exploit could allow the attacker to access sensitive information...

collaboration-world.com XSS vulnerability

Vulnerable URL: http://collaboration-world.com/cgi-bin/changelog.cgi?module=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18349084 VIP websit...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvc91800. Known Affected...