Lucene search

K
cveCiscoCVE-2015-6331
HistoryOct 12, 2015 - 10:59 a.m.

CVE-2015-6331

2015-10-1210:59:12
CWE-89
cisco
web.nvd.nist.gov
24
cve
2015
6331
sql injection
vulnerability
cisco
prime collaboration assurance
bug id cscus39887
nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

41.4%

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887.

Affected configurations

Nvd
Node
ciscoprime_collaboration_assuranceMatch10.5.1
VendorProductVersionCPE
ciscoprime_collaboration_assurance10.5.1cpe:2.3:a:cisco:prime_collaboration_assurance:10.5.1:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.001

Percentile

41.4%

Related for CVE-2015-6331