Common Services Platform Collector
Vendor:
First CVE: Mar 13, 2019 · Active for 7 years
19
Total CVEs
More Total CVEs than 95% of tracked products
4.8
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 29% of tracked products
5.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Common Services Platform Collector over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 13, 2019
7 years ago
Most Recent CVE
Jan 8, 2025
565 days ago
CVE Severity & Scoring
Common Services Platform Collector19 CVEs
84%
11%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network19 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low19 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (31.6%)
Unknown0 (0.0%)
Required13 (68.4%)
Privileges Required
Low4 (21.1%)
High4 (21.1%)
None11 (57.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-44228CRITICAL Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect agai | Dec 10, 2021 | 10.0 | 99 | YES | YES |
CVE-2019-1723CRITICAL A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a d | Mar 13, 2019 | 9.8 | 34 | NO | NO |
CVE-2021-1538HIGH A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vuln | Jun 4, 2021 | 7.2 | 24 | NO | NO |
CVE-2022-20666MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 22 | NO | NO |
CVE-2022-20674MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-20673MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-20672MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-20671MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-20670MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-20669MEDIUM Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduc | May 27, 2022 | 6.1 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
1 CVE
5.3% of CVEs· 98th percentile
Metasploit
1 CVE
5.3% of CVEs· 97th percentile
Nuclei
1 CVE
5.3% of CVEs· 97th percentile
ExploitDB
1 CVE
5.3% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Common Services Platform Collector
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 30.1.1-0 | 3 | 5.4 | 0.3% | 0 | 0 |
| 2.11.0.3 | 3 | 5.4 | 0.3% | 0 | 0 |
| 2.11.0.2 | 3 | 5.4 | 0.3% | 0 | 0 |
| 2.11.0.1 | 3 | 5.4 | 0.3% | 0 | 0 |
| 2.11 | 3 | 5.4 | 0.3% | 0 | 0 |
| 002.010\(000.000\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(001.002\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(001.001\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(001.000\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(000.002\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(000.001\) | 1 | 10.0 | 100.0% | 1 | 1 |
| 002.009\(000.000\) | 1 | 10.0 | 100.0% | 1 | 1 |