Vulnslist

Cisco product, release, and evidence lookup

CVE-2015-4305

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.

Data: Cisco advisories · Cisco CSAF · NVD CVEs · NVD CPEs · CISA KEV · EPSS

SeverityMEDIUM
CVSS4.0
EPSS0.17% EPSS low
CWECWE-264
KEV
Published
Modified

Products with public affected evidence

Product Advisory Affected evidence
Cisco Prime Collaboration Assurance cisco-sa-20150916-pca structured affected CSAF product_status
Cisco Prime Collaboration Assurance Cisco-SA-20150916-CVE-2015-4305 structured affected CSAF product_status