CVE-2015-6350

Cisco Prime Service Catalog 11.0 - Authenticated SQL Injection

Title source: llm

Description

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151028-psc

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034023

Scores

EPSS 0.0136

EPSS Percentile 68.8%

Details

CWE

CWE-89

Status published

Products (1)

cisco/prime_service_catalog 11.0_base

Published Oct 30, 2015

Tracked Since Feb 18, 2026