CVE-2018-0318

Cisco Prime Collaboration Provisioning (PCP) Password Reset Vulnerability (CVE-2018-0318) allows an unauthenticated, remote attacker to gain administrative privileges by abusing weak validation in the password reset function. Affected releases: PCP 11.6 and prior. The issue stems from insufficien...

CVE-2018-0322

CVE-2018-0322 affects Cisco Prime Collaboration Provisioning (PCP) — releases up to 12.1. The issue is an access-control flaw in the web management interface, where authentication for Help Desk and User Provisioning roles is not properly enforced, allowing an authenticated attacker to modify priv...

CVE-2018-0317

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an...

CVE-2018-0320

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...

CVE-2018-0320

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...

CVE-2018-0321: Improper Authentication

A vulnerability in Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system. The vulnerability is due to an open port in the Network Interface and Configuration Engine NICE service. An attacker could exploit...

PT-2018-8764

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning affected versions not specified Description A vulnerability in the batch provisioning feature could allow an authenticated, remote attacker to escalate privileges to the Administrator level. This issue is...

Cisco Prime Collaboration Provisioning Elevation of Privilege Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. An elevation of privilege vulnerability exists in the batch configuration feature in Cisco Prime Collaboration...

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability (CNVD-2018-11307)

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. An access control bypass vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning PCP. The...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (CNVD-2018-11254)

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A SQL injection vulnerability exists in the...

PT-2018-8751

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions 11.6 and prior Description A vulnerability in Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation RMI system due to ...

CVE-2018-0318: Improper Authentication

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...

PT-2018-8763

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning affected versions not specified Description A vulnerability in the web portal authentication process could allow an unauthenticated, local attacker to view sensitive data due to improper logging of...

CVE-2018-0335: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensitive data. The vulnerability is due to improper logging of authentication data. An attacker could exploit this vulnerability by monitoring...

PT-2018-8749

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions 11.6 and prior Description A vulnerability in the password recovery function could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The issue is du...

CVE-2017-6779: Uncontrolled Resource Consumption

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

Cisco Prime Collaboration Provisioning Authorization Issues Vulnerability

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. An authorization issue vulnerability exists ...

Cisco Prime Collaboration Provisioning Password Recovery Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...

CVE-2018-0322: Missing Authorization

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to modify sensitive data that is associated with arbitrary accounts on an affected device. The vulnerability is due to a failure to enforce access restrictio...

CVE-2018-0320: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...