Prime Service Catalog (Cisco) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2022-02-10. Vendor: Cisco.
CVEs of Prime Service Catalog
- CVE-2022-20680 - CVSS 6.5 (medium), 2022-02-10: A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive…
- CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
- CVE-2019-1875 - CVSS 4.8 (medium), 2019-06-20: A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site…
- CVE-2019-1874 - CVSS 8.8 (high), 2019-06-20: A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a…
- CVE-2018-15451 - CVSS 5.4 (medium), 2018-11-08: A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site…
- CVE-2018-0285 - CVSS 6.5 (medium), 2018-05-02: A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The…
- CVE-2018-0200 - CVSS 6.1 (medium), 2018-02-22: A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site…
- CVE-2018-0107 - CVSS 8.8 (high), 2018-01-18: A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected…
- CVE-2017-12364 - CVSS 6.5 (medium), 2017-11-30: A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized…
- CVE-2017-3866 - CVSS 6.1 (medium), 2017-03-17: A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting…
- CVE-2017-3810 - CVSS 5.4 (medium), 2017-02-03: A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against…
- CVE-2016-1462 - CVSS 6.1 (medium), 2016-07-28: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject…
- CVE-2015-6395 - CVSS 6.5 (medium), 2015-12-12: Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the…
- CVE-2015-6350 - CVSS 6.5 (medium), 2015-10-30: SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via…
- CVE-2015-4190 - CVSS 4.3 (medium), 2015-06-17: Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified…
- CVE-2015-0581 - CVSS 7.5 (high), 2015-01-28: The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and…
