CVE-2016-1392 — Improper Input Validation in Cisco Prime Collaboration Assurance

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.4HIGHNVD
EPSS
0.2%
top 54.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Prime Collaboration Assurance
Timeline
PublishedMay 5
Latest updateMay 17

Description

Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuu34121.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:NExploitability: 2.8 | Impact: 4.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5wwc-cq29-4q6m: Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10↗2022-05-17
▶
CVEList
CVE-2016-1392: Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10↗2016-05-05
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Collaboration Assurance Open Redirect Vulnerability↗2016-05-03
▶
CVE-2016-1392 — Improper Input Validation in Cisco | cvebase