CVE-2018-15450: medium-severity vulnerability in Cisco Prime Collaboration Assurance
Cisco Prime Collaboration Assurance File Overwrite Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 2.5%
A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input field to provide a custom path location. A successful exploit could allow the attacker to overwrite files on the file system.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Cisco · Cisco Prime Collaboration AssuranceRelated CVEs — Cisco Prime Collaboration Assurance
In the same product, most dangerous first.
CVE-2018-0458—Cisco Prime Collaboration Assurance Cross-Site Scripting VulnerabilityEPSS 1.8%CVE-2019-1662HIGHCisco Prime Collaboration Assurance Software Unauthenticated Access VulnerabilityEPSS 1.8%CVE-2018-15438MEDIUMCisco Prime Collaboration Assurance Cross-Site Request Forgery VulnerabilityEPSS 1.2%CVE-2019-1856MEDIUMCisco Prime Collaboration Assurance Cross-Site Scripting VulnerabilityEPSS 1.1%