Prime Collaboration

Vendor:

First CVE: Feb 19, 2013 · Active for 13 years

18
Total CVEs
More Total CVEs than 94% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Prime Collaboration over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 19, 2013
13 years ago
Most Recent CVE
Nov 8, 2018
2,819 days ago

CVE Severity & Scoring

Prime Collaboration18 CVEs
All CVEs353,173 CVEs
MediumHighCritical
Attack Vector
Local3 (16.7%)
Network10 (55.6%)
Unknown5 (27.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (72.2%)
High0 (0.0%)
Unknown5 (27.8%)
User Interaction
None13 (72.2%)
Unknown5 (27.8%)
Required0 (0.0%)
Privileges Required
Low6 (33.3%)
High1 (5.6%)
None6 (33.3%)
Unknown5 (27.8%)

Top CVEs

Signals from CVEs in this product scope (18 CVEs).

18 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the administrative web interface u
Oct 5, 20189.831NONO
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulner
Jun 7, 20189.830NONO
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an
Jun 7, 20189.830NONO
A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrato
Jun 7, 20188.828NONO
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an aff
Jun 7, 20189.828NONO
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The
Mar 8, 20188.427NONO
A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensitive data that is assoc
Jun 7, 20188.826NONO
A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. The vulnerability i
Jun 7, 20188.826NONO
A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vuln
Jun 7, 20189.825NONO
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. Th
Aug 1, 20186.524NONO

Exploit Exposure

Signals from CVEs in this product scope (18 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (18 CVEs).

Media Mentions

Signals from CVEs in this product scope (18 CVEs).

Top CNAs Publishing CVEs For Prime Collaboration

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.0.516.70.4%00
9.0.016.70.4%00
12.217.80.4%00
12.147.92.3%00
11.618.40.4%00
11.0.016.70.4%00
10.5\(1\)15.01.9%00
10.015.02.4%00