CVE-2015-0754: Input Validation

Published May 29, 2015

Updated

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Affected Software

1 affected component

Cisco Finesse=10.5\(1\)_base

Event History

May 29, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0754?

CVE-2015-0754 is considered a moderate severity vulnerability due to its potential for causing denial of service and information disclosure.

How do I fix CVE-2015-0754?

To fix CVE-2015-0754, ensure that you update to a patched version of Cisco Finesse that addresses this vulnerability.

What are the potential impacts of CVE-2015-0754?

The impacts of CVE-2015-0754 include unauthorized access to sensitive information and possible denial of service through resource exhaustion.

Who is affected by CVE-2015-0754?

Only remote authenticated users of Cisco Finesse 10.5(1) are affected by CVE-2015-0754.

What type of attack can exploit CVE-2015-0754?

CVE-2015-0754 can be exploited through a crafted XML document intended to consume system resources.