Polycom Realpresence Resource Manager vulnerabilities
5 known vulnerabilities affecting polycom/realpresence_resource_manager.
Total CVEs
5
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2015-4683P3CRITICALCVSS 9.8PoC≤ 8.3.22017-09-19
CVE-2015-4683 [CRITICAL] CWE-264 CVE-2015-4683: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive inf
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
nvd
CVE-2015-4682P3MEDIUMCVSS 6.5PoC≤ 8.3.22017-09-19
CVE-2015-4682 [MEDIUM] CWE-200 CVE-2015-4682: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obt
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.
nvd
CVE-2015-4681P3HIGHCVSS 7.8PoC≤ 8.3.22017-09-19
CVE-2015-4681 [HIGH] CWE-255 CVE-2015-4681: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified i
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
nvd
CVE-2015-4684P3MEDIUMCVSS 6.5PoC≤ 8.3.22017-09-19
CVE-2015-4684 [MEDIUM] CWE-255 CVE-2015-4684: Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) bef
Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter
nvd
CVE-2015-4685P3HIGHCVSS 7.0PoC≤ 8.3.22017-09-19
CVE-2015-4685 [HIGH] CWE-264 CVE-2015-4685: Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the pl
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
nvd