Cisco Prime Collaboration Provisioning Authorization Issues Vulnerability

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. An authorization issue vulnerability exists ...

Cisco Prime Collaboration Provisioning Password Recovery Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...

CVE-2018-0322: Missing Authorization

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

CVE-2018-0320: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...

Cisco Prime Collaboration Provisioning Access Control Vulnerability

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A privilege-granting and access control...

CVE-2018-0318: Improper Authentication

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...

PT-2018-8747

Name of the Vulnerable Software and Affected Versions: Cisco Prime Collaboration Provisioning PCP versions prior to 12.2 Description: A vulnerability in the web interface could allow an authenticated, remote attacker to escalate their privileges due to insufficient web portal access control check...

PT-2018-8752

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions 12.1 and prior Description A vulnerability in the web management interface could allow an authenticated, remote attacker to modify sensitive data associated with arbitrary accounts on an...

CVE-2018-0336: Missing Authorization

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could...

PT-2018-8346

Name of the Vulnerable Software and Affected Versions Cisco Voice Operating System VOS-based products versions affected versions not specified Cisco Emergency Responder versions affected versions not specified Cisco Finesse versions affected versions not specified Cisco Hosted Collaboration...

CVE-2018-0317: Missing Authorization

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an...

PT-2018-8750

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions prior to 12.1 Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to execute arbitrary SQL queries due to a lack of proper validation on...

PT-2018-8748

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions 11.6 and prior Description A vulnerability in the password reset function could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The issue is due t...

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability (CNVD-2018-11307)

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. An access control bypass vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning PCP. The...

CVE-2017-6779: Uncontrolled Resource Consumption

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...

Cisco Prime Collaboration Provisioning Cleartext Passwords Written to World-Readable File Vulnerability

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data. The vulnerability is due to improper logging of authentication data. An attacker could exploit this vulnerability by monitoring...

Cisco Prime Collaboration Provisioning Access Control Deficiency in Batch Function Privilege Escalation Vulnerability

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could...

Cisco Prime Collaboration Provisioning Unauthenticated Remote Method Invocation Vulnerability

A vulnerability in Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system. The vulnerability is due to an open port in the Network Interface and Configuration Engine NICE service. An attacker could exploit...

Cisco Prime Collaboration Provisioning Access Control Vulnerability

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...