Not rated
CVE-2018-0205 A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an…
Description
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by placing a malicious string in the Prime Collaboration Provisioning database. A successful exploit could allow the attacker to access Cisco Prime Collaboration Provisioning by injecting crafted data into the database. Cisco Bug IDs: CSCvd86609.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Prime Collaboration Provisioning Tool | Versions not published |
References
- 103145 www.securityfocus.com
- 1040409 www.securitytracker.com
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Prime Collaboration Provisioning Tool
The 11 CVEs of Cisco Prime Collaboration Provisioning Tool →
CVE-2018-0204
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated,…
Not rated
CVE-2017-6793
A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2017-6792
A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an…
Not rated
CVE-2017-6759
A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an…
Not rated