CVE-2015-4307

CRITICAL 9.0CVE-2015-4307 · Published 20/09/2015 · updated 17/06/2026

In short

CVE-2015-4307 is a CRITICAL (CVSS 9.0) vulnerability affecting prime collaboration provisioning (cisco).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
prime collaboration provisioning cisco	`= 10.0.0= 10.5.0= 10.5.1= 10.6.0= 9.0.0= 9.5.0`	No fix yet

Description

The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-pcp · Vendor Advisory
securitytracker.com/id/1033579 · Third Party Advisory

More vulnerabilities in prime collaboration provisioning

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

prime collaboration provisioning

cisco

= 10.0.0= 10.5.0= 10.5.1= 10.6.0= 9.0.0= 9.5.0

No fix yet

More vulnerabilities in prime collaboration provisioning

See all →