Unscored severity · published Oct 12, 2015
CVE-2015-6331
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified…
–
CVSS
1.6%
EPSS
No
On KEV
Description
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Prime Collaboration Assurance · Cisco
10.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6331
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6331
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-pca2
Third Party Advisory
http://www.securitytracker.com/id/1033782
More from Prime Collaboration Assurance
9.8
CVE-2018-0321
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system
9.1
CVE-2019-1662
Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability
8.8
CVE-2017-6659
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request…
8.4
CVE-2018-0141
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system
7.5
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,…