PT-2016-6924 · Cisco · Cisco Prime Collaboration Provisioning

Published 2016-11-03 · Updated 2017-07-29 · CVE-2016-6451

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning version 10.6

Description The issue allows an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. This is due to multiple vulnerabilities in the web framework code.

Recommendations For Cisco Prime Collaboration Provisioning version 10.6, update to a version that includes the fixes for the identified issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-6451

Affected Products

Cisco Prime Collaboration Provisioning

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6451 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-pcp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6451 · Vendor Advisory
• http://securityfocus.com/bid/93917 · Note
• http://securitytracker.com/id/1037112 · Note