3141 matches found
Design/Logic Flaw
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
CVE-2015-6332
CVE-2015-6332 affects Cisco Prime Infrastructure 2.2. The issue is due to improper handling of SSL renegotiation requests, enabling remote, unauthenticated DoS via multiple SSL renegotiation attempts (daemon hang). Root cause: vulnerability in SSL renegotiation handling. No software updates or wo...
CVE-2015-6332
Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...
CVE-2015-6328
CVE-2015-6328 affects Cisco Prime Collaboration Assurance (PCA) 10.5(1). The web framework allows remote authenticated users to bypass access controls and read arbitrary files via a crafted URL (information disclosure). This is due to incorrect implementation of access control in the PCA web comp...
CVE-2015-6328
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
Sql injection
SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...
Sql injection
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
CVE-2015-6331
CVE-2015-6331 is a SQL injection vulnerability in the web framework of Cisco Prime Collaboration Assurance (PCA). The issue affects PCA 10.5.1.x before 10.5.1.58480, with an authenticated remote attacker able to inject or manipulate SQL via input used in backend queries, potentially exposing or m...
CVE-2015-6329
CVE-2015-6329 corresponds to a SQL injection vulnerability in Cisco Prime Collaboration Provisioning (PCP). The issue affects PCP 10.6.x and 11.0.x prior to 11.0.0.815 (per Nessus) and Cisco’s advisory describes an authenticated, remote attacker able to execute unauthorized SQL queries via the we...
Cisco Prime multiple security vulnerabilities
Restrictions bypass, privilege escalation, information disclosure...
Cisco Prime Collaboration Assurance SQL Injection Vulnerability (CNVD-2015-06574)
Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A SQL injection vulnerability exists in the Cisco Prime Collaboration Assurance WEB architecture,...
Cisco Prime Infrastructure SSL Renegotiation Request Handling Denial of Service Vulnerability
Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. Cisco Prime Infrastructure does not properly handle SSL negotiation, allowing remote...
Cisco Prime Collaboration Assurance SQL Injection Vulnerability
Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A SQL injection vulnerability exists in the Cisco Prime Collaboration Assurance WEB architecture,...
Cisco Prime Collaboration Assurance File Viewing Vulnerability
Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A security vulnerability in the Cisco Prime Collaboration Assurance WEB architecture allows remote...
Cisco Prime Renegotiation Request Denial of Service Vulnerability
A vulnerability in Cisco Prime could allow a remote, unauthenticated attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of SSL renegotiation requests. An unauthenticated, remote attacker could exploit this vulnerability by sending multiple SSL...
Cisco Prime Collaboration Assurance Arbitrary File Retrieval Vulnerability
A vulnerability in the web framework of Cisco Prime Collaboration Assurance PCA could allow an authenticated, remote attacker to retrieve arbitrary files from the underlying file system. The vulnerability is due to incorrect implementation of the access control code. An attacker could exploit thi...
Cisco Prime Collaboration Provisioning SQL Injection Vulnerability
A vulnerability in web framework of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to execute unauthorized SQL queries. The vulnerability is due to a failure to validate user-supplied input used in SQL queries. An attacker could exploit this vulnerability...
Cisco Prime Collaboration Assurance SQL Injection Vulnerability
A vulnerability in web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to execute unauthorized SQL queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could exploit this vulnerabilit...
