CVE-2015-6328: Exposure of Sensitive Information to an Unauthorized Actor

The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...

CVE-2015-6328

The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...

CVE-2015-6332

CVE-2015-6332 affects Cisco Prime Infrastructure 2.2. The issue is due to improper handling of SSL renegotiation requests, enabling remote, unauthenticated DoS via multiple SSL renegotiation attempts (daemon hang). Root cause: vulnerability in SSL renegotiation handling. No software updates or wo...

Sql injection

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

Sql injection

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...

CVE-2015-6329

CVE-2015-6329 corresponds to a SQL injection vulnerability in Cisco Prime Collaboration Provisioning (PCP). The issue affects PCP 10.6.x and 11.0.x prior to 11.0.0.815 (per Nessus) and Cisco’s advisory describes an authenticated, remote attacker able to execute unauthorized SQL queries via the we...

CVE-2015-6331

CVE-2015-6331 is a SQL injection vulnerability in the web framework of Cisco Prime Collaboration Assurance (PCA). The issue affects PCA 10.5.1.x before 10.5.1.58480, with an authenticated remote attacker able to inject or manipulate SQL via input used in backend queries, potentially exposing or m...

Cisco Prime multiple security vulnerabilities

Restrictions bypass, privilege escalation, information disclosure...

PT-2015-7183

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions 10.6 through 11.0 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Collaboration Provisioning versions 10.6...

CVE-2015-6331: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...

PT-2015-7185

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance version 10.51 Description A SQL injection issue in the web framework allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Collaboration Assurance version 10.51...

CVE-2015-6329: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

Cisco Prime Infrastructure SSL Renegotiation Request Handling Denial of Service Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. Cisco Prime Infrastructure does not properly handle SSL negotiation, allowing remote...

Cisco Prime Collaboration Assurance SQL Injection Vulnerability (CNVD-2015-06574)

Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A SQL injection vulnerability exists in the Cisco Prime Collaboration Assurance WEB architecture,...

Cisco Prime Collaboration Assurance File Viewing Vulnerability

Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A security vulnerability in the Cisco Prime Collaboration Assurance WEB architecture allows remote...

Cisco Prime Collaboration Assurance SQL Injection Vulnerability

Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A SQL injection vulnerability exists in the Cisco Prime Collaboration Assurance WEB architecture,...

Cisco Prime Renegotiation Request Denial of Service Vulnerability

A vulnerability in Cisco Prime could allow a remote, unauthenticated attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of SSL renegotiation requests. An unauthenticated, remote attacker could exploit this vulnerability by sending multiple SSL...

Cisco Prime Collaboration Assurance Arbitrary File Retrieval Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Assurance PCA could allow an authenticated, remote attacker to retrieve arbitrary files from the underlying file system. The vulnerability is due to incorrect implementation of the access control code. An attacker could exploit thi...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability

A vulnerability in web framework of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to execute unauthorized SQL queries. The vulnerability is due to a failure to validate user-supplied input used in SQL queries. An attacker could exploit this vulnerability...

Cisco Prime Collaboration Assurance SQL Injection Vulnerability

A vulnerability in web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to execute unauthorized SQL queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An attacker could exploit this vulnerabilit...