Realpresence Resource Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:polycom:realpresence_resource_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Polycom (e3e1cb67-ccd7-5fd1-af28-6973990bb1ca) |
|---|---|
| Product | Realpresence Resource Manager (499b24ee-43d4-594d-b836-cd6d98e170dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-4685 |
vulnerable | 2026-06-08 05:06:40.444586 |
Details available
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
Published: 2017-09-19T19:00:00.000Z
Updated: 2024-08-06T06:18:12.288Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4684 |
vulnerable | 2026-06-08 05:06:40.444044 |
Details available
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter to PlcmRmWeb/FileUpload or to read and remove arbitrary files via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager.
Published: 2017-09-19T19:00:00.000Z
Updated: 2024-08-06T06:18:12.223Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4683 |
vulnerable | 2026-06-08 05:06:40.443682 |
Details available
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
Published: 2017-09-19T19:00:00.000Z
Updated: 2024-08-06T06:18:12.100Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4682 |
vulnerable | 2026-06-08 05:06:40.443302 |
Details available
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.
Published: 2017-09-19T19:00:00.000Z
Updated: 2024-08-06T06:18:12.130Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4681 |
vulnerable | 2026-06-08 05:06:40.442847 |
Details available
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
Published: 2017-09-19T19:00:00.000Z
Updated: 2024-08-06T06:18:12.193Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.