[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkZUMfCTKuuxjTE92FRGC2hvbnIfZQdLoriLdFq_QbX8":3,"g5a-ex:cisco\u002Fprime_collaboration_assurance@*":159,"g5a-family:cisco\u002Fprime_collaboration_assurance":161},{"success":4,"data":5},true,{"product":6,"versions":58,"topVulnerabilitiesByEpss":77,"kevVulnerabilities":136,"seoMetadata":137,"meta":156},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":57},"cisco","prime_collaboration_assurance",18,20,0,"2019-05-03",[14,18,21,24,27,29,31,33,35,37,39,42,45,47,49,51,53,55],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0.0",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"10.5.0",4,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"10.5.1",9,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"10.6.0",7,{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},"11.0",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"11.0.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"11.1",{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"11.5",{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},"11.5.0",{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"11.5\\(0\\)",1,{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},"11.6",2,{"version":46,"cve_count":41,"kev_count":11,"has_kev":17},"11.6.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"11.6es16",{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},"12.1",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"12.1es2",{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},"9.0.0",{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},"9.5.0","Prime Collaboration Assurance by Cisco is a technology product with 18 tracked versions and 20 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},{"version":46,"cve_count":41,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":16,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":16,"kev_count":11,"has_kev":17},{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},[78,86,92,97,103,108,113,119,125,130],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":83,"severity":84,"isKev":17,"epssScore":85},"CVE-2018-0321","A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to an open port in the Network Interface and Configuration Engine (NICE) service. An attacker could exploit this vulnerability by accessing the open RMI system on an affected PCP instance. An exploit could allow the attacker to perform malicious actions that affect PCP and the devices that are connected to it. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd61746.","2018-06-07",9.8,"v3.0","Critical",0.035,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":23,"cvssVersion":90,"severity":84,"isKev":17,"epssScore":91},"CVE-2015-4304","The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652.","2015-09-20","v2",0.02644,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":23,"cvssVersion":90,"severity":84,"isKev":17,"epssScore":96},"CVE-2015-6389","Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.","2015-12-13",0.02601,{"cveId":98,"description":99,"publishedDate":89,"cvssScore":100,"cvssVersion":90,"severity":101,"isKev":17,"epssScore":102},"CVE-2015-4306","The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.",8.5,"High",0.02279,{"cveId":104,"description":105,"publishedDate":81,"cvssScore":106,"cvssVersion":83,"severity":101,"isKev":17,"epssScore":107},"CVE-2017-6779","Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction. Therefore, the file is allowed to consume the majority of available disk space on the appliance. An attacker could exploit this vulnerability by sending crafted remote connection requests to the appliance. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the application functions could operate abnormally, making the appliance unstable. This vulnerability affects the following Cisco Voice Operating System (VOS)-based products: Emergency Responder, Finesse, Hosted Collaboration Mediation Fulfillment, MediaSense, Prime License Manager, SocialMiner, Unified Communications Manager (UCM), Unified Communications Manager IM and Presence Service (IM&P - earlier releases were known as Cisco Unified Presence), Unified Communication Manager Session Management Edition (SME), Unified Contact Center Express (UCCx), Unified Intelligence Center (UIC), Unity Connection, Virtualized Voice Browser. This vulnerability also affects Prime Collaboration Assurance and Prime Collaboration Provisioning. Cisco Bug IDs: CSCvd10872, CSCvf64322, CSCvf64332, CSCvi29538, CSCvi29543, CSCvi29544, CSCvi29546, CSCvi29556, CSCvi29571, CSCvi31738, CSCvi31741, CSCvi31762, CSCvi31807, CSCvi31818, CSCvi31823.",7.5,0.01984,{"cveId":109,"description":110,"publishedDate":89,"cvssScore":20,"cvssVersion":90,"severity":111,"isKev":17,"epssScore":112},"CVE-2015-4305","The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.","Medium",0.01943,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":90,"severity":111,"isKev":17,"epssScore":118},"CVE-2015-6328","The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380.","2015-10-13",6.8,0.01885,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":83,"severity":111,"isKev":17,"epssScore":124},"CVE-2016-9200","A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.5(1) 10.6.","2016-12-14",6.1,0.01799,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":123,"cvssVersion":83,"severity":111,"isKev":17,"epssScore":129},"CVE-2018-0458","A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a customized link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.","2018-10-05",0.01783,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":83,"severity":84,"isKev":17,"epssScore":135},"CVE-2019-1662","A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the QOVR service with a valid username. A successful exploit could allow the attacker to perform actions with the privileges of the user that is used for access. This vulnerability affects Cisco PCA Software Releases prior to 12.1 SP2.","2019-02-21",9.1,0.01781,[],{"title":138,"metaDescription":139,"keywords":140,"structuredData":141},"Prime Collaboration Assurance by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Prime Collaboration Assurance by Cisco covering 18 versions with 20 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Prime Collaboration Assurance vulnerabilities, Prime Collaboration Assurance security, Prime Collaboration Assurance CVE, Cisco Prime Collaboration Assurance, Prime Collaboration Assurance threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":142,"@type":143,"name":144,"description":139,"url":145,"manufacturer":146,"applicationCategory":150,"softwareVersion":151,"mainEntity":152},"https:\u002F\u002Fschema.org","SoftwareApplication","Prime Collaboration Assurance","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fprime_collaboration_assurance",{"@type":147,"name":148,"url":149},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","18 versions tracked",{"@type":153,"name":154,"description":155,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Prime Collaboration Assurance Security Vulnerabilities","Security vulnerabilities affecting Prime Collaboration Assurance by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":157,"apiVersion":158},"2026-10-17T23:51:33.937Z","3.0",{"rows":160,"total":11,"capped":17,"failed":11},[],[]]