Lucene search
HistoryMay 30, 2015 - 2:59 p.m.
CVE-2015-0758
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
41.8%
The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.
Affected configurations
Node
ciscounified_meetingplaceMatch8.6\(1.9\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_meetingplace | 8.6(1.9) | cpe:2.3:a:cisco:unified_meetingplace:8.6\(1.9\):*:*:*:*:*:*:* |
Related
nessus
nessus
prion
prion
Xxe
2015-05-30 14:59:00
cisco
cisco
cvelist
cvelist
CVE-2015-0758
2015-05-30 14:00:00
cve
cve
CVE-2015-0758
2015-05-30 14:59:05
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
41.8%
Related for NVD:CVE-2015-0758