Cisco Prime Collaboration Provisioning vulnerabilities

CVE-2018-15389 [CRITICAL] CWE-255 CVE-2018-15389: A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded password that, in some cases, is not replaced with

CVE-2020-3184 [HIGH] CWE-89 CVE-2020-3184: A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Soft A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates user input for specific SQL queries. An attacker could explo

CVE-2021-34732 [MEDIUM] CWE-79 CVE-2021-34732: A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning coul A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker c

CVE-2020-3192 [MEDIUM] CWE-79 CVE-2020-3192: A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning coul A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interf

CVE-2020-3193 [MEDIUM] CWE-200 CVE-2020-3193: A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning coul A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-based management interface include unnecessary server information. An attacker could exploit this