CVE-2015-0702
Cisco Unified Meetingplace - Improper Input Validation
Title source: ruleDescription
Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.
Scores
EPSS
0.0127
EPSS Percentile
79.2%
Classification
CWE
CWE-434
CWE-20
Status
draft
Affected Products (1)
cisco/unified_meetingplace
Timeline
Published
Apr 21, 2015
Tracked Since
Feb 18, 2026