What is the CVSS score of CVE-2015-4190?

CVE-2015-4190 has a CVSS 2.0 base score of 4.3 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.3%.

Prime Service Catalog CVE-2015-4190

MEDIUM

2015-06-17 psirt@cisco.com

Cisco Information Disclosure Prime Service Catalog

4.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Jun 17, 2015 - 10:59 cve.org

MEDIUM 4.3

DescriptionCVE.org

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683.

AnalysisAI

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683. Affected products include: Cisco Prime Service Catalog.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Prime Service Catalog

View all

CVE-2019-1874 HIGH This Week

8.8 Jun 20

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthentic

CVE-2018-0107 HIGH This Week

8.8 Jan 18

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to e

CVE-2015-0581 HIGH This Week

7.5 Jan 28

The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or c

CVE-2015-6395 MEDIUM This Month

6.5 Dec 12

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows

CVE-2017-12364 MEDIUM This Month

6.5 Nov 30

A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote

CVE-2015-6350 MEDIUM This Month

6.5 Oct 30

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users t

CVE-2018-0285 MEDIUM This Month

6.5 May 02

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny

CVE-2016-1462 MEDIUM This Month

6.1 Jul 28

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0

CVE-2017-3866 MEDIUM This Month

6.1 Mar 17

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker

CVE-2018-0200 MEDIUM This Month

6.1 Feb 22

A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacke

CVE-2017-3810 MEDIUM This Month

5.4 Feb 03

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to con

CVE-2018-15451 MEDIUM This Month

5.4 Nov 08

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2015-4190 vulnerability details – vuln.today

Back