PT-2015-6447

CVE-2015-4188

·

Published

2015-06-17

·

Updated

2016-12-07

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration version 10.5(1)
Description A SQL injection issue in the Manager interface allows remote attackers to execute arbitrary SQL commands via a crafted URL.
Recommendations For Cisco Prime Collaboration version 10.5(1), update to a version that includes the fix for Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2015-4188
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com