Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:prime_collaboration_provisioning:12.1:*:*:*:*:*:*:*

part: a version: 12.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductPrime Collaboration Provisioning (505086e2-d412-5e8d-85a6-9f1adb3201cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0205 vulnerable 2026-06-08 05:10:22.537641 Details available
A vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by placing a malicious string in the Prime Collaboration Provisioning database. A successful exploit could allow the attacker to access Cisco Prime Collaboration Provisioning by injecting crafted data into the database. Cisco Bug IDs: CSCvd86609.
Published: 2018-02-22T00:00:00.000Z
Updated: 2024-12-02T21:00:34.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0204 vulnerable 2026-06-08 05:10:22.537102 Details available
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by using a brute-force attack (Repeated Bad Login Attempts). A successful exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore access. Cisco Bug IDs: CSCvd07264.
Published: 2018-02-22T00:00:00.000Z
Updated: 2024-12-02T21:00:47.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6759 vulnerable 2026-06-08 05:09:52.748722 Details available
A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304.
Published: 2017-08-07T06:00:00.000Z
Updated: 2024-08-05T15:41:17.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6755 vulnerable 2026-06-08 05:09:52.744884 Details available
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc90312. Known Affected Releases: 12.1.
Published: 2017-07-25T19:00:00.000Z
Updated: 2024-08-05T15:41:17.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6705 vulnerable 2026-06-08 05:09:52.176496 Details available
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1.
Published: 2017-07-04T00:00:00.000Z
Updated: 2024-08-05T15:41:16.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6704 vulnerable 2026-06-08 05:09:52.176071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.