Cisco Hosted Collaboration Solution — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Hosted Collaboration Solution, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2017-12337 — CVSS 9.8 (critical): A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could…
• CVE-2017-9805 — CVSS 8.1 (high) — actively exploited: The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of…
• CVE-2015-0741 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and…
• CVE-2015-0750 — CVSS 6.5 (medium): The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to…
• CVE-2018-0386 — CVSS 6.1 (medium): A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a…
• CVE-2019-15968 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an…
• CVE-2019-1911 — CVSS 5.3 (medium): A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local…
• CVE-2013-1174 — CVSS 5.0 (medium): Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote…
• CVE-2013-3381 — CVSS 5.0 (medium): Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP…
• CVE-2014-2121 — CVSS 5.0 (medium): The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP…
• CVE-2014-2122 — CVSS 5.0 (medium): Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of…
• CVE-2015-6352 — CVSS 4.3 (medium): Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on…
• CVE-2015-4260 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows remote attackers to inject arbitrary web…
• CVE-2015-0626 — CVSS 4.3 (medium): The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via…
• CVE-2015-6404 — CVSS 4.0 (medium): Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive…