Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-4328

EPSS 0.24% · P48
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-4328

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, as demonstrated by read or write operations on the Unified Communications lookup page, aka Bug ID CSCuv12552.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco TelePresence Video Communication Server Expressway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco TelePresence Video Communication Server（VCS）Expressway是美国思科（Cisco）公司的一款网真视频通信服务器，它能够与统一通信和语音通信环境集成，从而为使用各种通信工具的最终用户提供最佳体验。 Cisco TelePresence VCS Expressway X8.5.2版本中存在安全漏洞，该漏洞源于程序没有正确检查用户账户的只读属性。远程攻击者可通过发送特制的HTTP请求利用该漏洞执行任意操作系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-4328

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-4328

Please Login to view more intelligence information

Same Patch Batch · n/a · 2015-08-20 · 29 CVEs total

CVE-2015-4321Cisco Adaptive Security Appliance Software Unicast Reverse Path Forwarding 安全漏洞
CVE-2015-6530OpenText Secure MFT 跨站脚本漏洞
CVE-2015-6529phpipam 跨站脚本漏洞
CVE-2015-6528Coppermine Photo Gallery 跨站脚本漏洞
CVE-2015-3219OpenStack Horizon 跨站脚本漏洞
CVE-2015-4318Cisco TelePresence Video Communication Server Expressway 拒绝服务漏洞
CVE-2015-4536EMC Documentum Content Server 信息泄露漏洞
CVE-2015-4535EMC Documentum Content Server Java Method Server 权限许可和访问控制漏洞
CVE-2015-4534EMC Documentum Content Server Java Method Server 输入验证漏洞
CVE-2015-4533EMC Documentum Content Server 权限许可和访问控制漏洞
CVE-2015-4532EMC Documentum Content Server 权限许可和访问控制漏洞
CVE-2015-4531EMC Documentum Content Server 权限许可和访问控制漏洞
CVE-2015-4530多款EMC Documentum产品跨站请求伪造漏洞
CVE-2015-4329Cisco TelePresence Video Communication Server Expressway 输入验证漏洞
CVE-2015-4314Cisco TelePresence Video Communication Server Expressway System Snapshot 安全漏洞
CVE-2015-4319Cisco TelePresence Video Communication Server Expressway 安全漏洞
CVE-2015-4316Cisco TelePresence Video Communication Server Expressway 安全漏洞
CVE-2015-4303Cisco TelePresence Video Communication Server 权限许可和访问控制漏洞
CVE-2015-0542EMC RSA Archer GRC 跨站请求伪造漏洞
CVE-2015-0537多款EMC RSA产品数字错误漏洞

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-4328

No comments yet

Leave a comment