CVE-2022-20680
Published Feb 10, 2022A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive information on an affected d…
Vendor/product archive
cisco / prime_service_catalog CVEs
Beta · best-effort15 CVEs tagged to cisco / prime_service_catalog — 0 Critical, 3 High, 12 Medium, 0 Low, 0 Unrated.
CVE-2019-1875
Published Jun 20, 2019A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack a…
CVE-2019-1874
Published Jun 20, 2019A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthenticated, remote attacker to conduct a cross-site request forge…
CVE-2018-15451
Published Nov 8, 2018A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack a…
CVE-2018-0285
Published May 2, 2018A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to…
CVE-2018-0200
Published Feb 22, 2018A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack…
CVE-2018-0107
Published Jan 18, 2018A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerab…
CVE-2017-12364
Published Nov 30, 2017A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language…
CVE-2017-3866
Published Mar 17, 2017A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the…
CVE-2017-3810
Published Feb 3, 2017A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged…
CVE-2016-1462
Published Jul 28, 2016Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attackers to inject arbitrary web script or…
CVE-2015-6395
Published Dec 12, 2015Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct r…
CVE-2015-6350
Published Oct 30, 2015SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a…
CVE-2015-4190
Published Jun 17, 2015Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSC…
CVE-2015-0581
Published Jan 28, 2015The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via a…
Showing 1-15 of 15 CVEsPage 1 of 1