Skip to main content

Prime Service Catalog CVE-2015-6395

MEDIUM
Permissions, Privileges, and Access Controls (CWE-264)
2015-12-12 psirt@cisco.com
Cisco Privilege Escalation Prime Service Catalog
6.5
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:P/I:P/A:P
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Dec 12, 2015 - 11:59 cve.org
MEDIUM 6.5

DescriptionCVE.org

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

AnalysisAI

Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188. Affected products include: Cisco Prime Service Catalog.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Prime Service Catalog

View all
CVE-2019-1874 HIGH
8.8 Jun 20

A vulnerability in the web-based management interface of Cisco Prime Service Catalog Software could allow an unauthentic
CVE-2018-0107 HIGH
8.8 Jan 18

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to e
CVE-2015-0581 HIGH
7.5 Jan 28

The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or c
CVE-2017-12364 MEDIUM
6.5 Nov 30

A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote
CVE-2015-6350 MEDIUM
6.5 Oct 30

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users t
CVE-2018-0285 MEDIUM
6.5 May 02

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny
CVE-2016-1462 MEDIUM
6.1 Jul 28

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0
CVE-2017-3866 MEDIUM
6.1 Mar 17

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker
CVE-2018-0200 MEDIUM
6.1 Feb 22

A vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacke
CVE-2017-3810 MEDIUM
5.4 Feb 03

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to con
CVE-2018-15451 MEDIUM
5.4 Nov 08

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot
CVE-2019-1875 MEDIUM
4.8 Jun 20

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remot

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2015-6395 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy