Cisco Hosted Collaboration Solution (HCS)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:hosted_collaboration_solution:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductHosted Collaboration Solution (edb583cc-d9fe-5964-8efa-aa9f324e4588)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-12337 vulnerable 2026-06-08 05:08:46.715934 Details available
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration is performed on an affected device. When a refresh upgrade or PCD migration is completed successfully, an engineering flag remains enabled and could allow root access to the device with a known password. If the vulnerable device is subsequently upgraded using the standard upgrade method to an Engineering Special Release, service update, or a new major release of the affected product, this vulnerability is remediated by that action. Note: Engineering Special Releases that are installed as COP files, as opposed to the standard upgrade method, do not remediate this vulnerability. An attacker who can access an affected device over SFTP while it is in a vulnerable state could gain root access to the device. This access could allow the attacker to compromise the affected system completely. Cisco Bug IDs: CSCvg22923, CSCvg55112, CSCvg55128, CSCvg55145, CSCvg58619, CSCvg64453, CSCvg64456, CSCvg64464, CSCvg64475, CSCvg68797.
Published: 2017-11-16T07:00:00.000Z
Updated: 2024-08-05T18:36:56.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0626 vulnerable 2026-06-08 05:06:21.894390 Details available
The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114.
Published: 2015-02-19T00:00:00.000Z
Updated: 2024-08-06T04:17:32.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2122 vulnerable 2026-06-08 05:05:27.651144 Details available
Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCub58999.
Published: 2014-03-19T01:00:00.000Z
Updated: 2024-08-06T10:05:59.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2121 vulnerable 2026-06-08 05:05:27.650748 Details available
The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643.
Published: 2014-03-19T01:00:00.000Z
Updated: 2024-08-06T10:05:59.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3381 vulnerable 2026-06-08 05:04:31.318739 Details available
Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756.
Published: 2013-06-12T01:00:00.000Z
Updated: 2024-09-17T03:13:04.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1174 vulnerable 2026-06-08 05:03:52.993704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.