Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2016-1462

Disclosure Date: July 28, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795.
0
0
Attacker Value
Unknown

CVE-2015-6395

Disclosure Date: December 12, 2015 (last updated October 05, 2023)
Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.
0
0
Attacker Value
Unknown

CVE-2015-6350

Disclosure Date: October 30, 2015 (last updated October 05, 2023)
SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843.
0
0