CVE-2015-6329: SQL Injection
Published Oct 12, 2015
·Updated
SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074.
Affected Software
2 affected components
Cisco Prime Collaboration Provisioning=10.6.0
Cisco Prime Collaboration Provisioning=11.0.0
Event History
Oct 12, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6329?
CVE-2015-6329 is classified as a high severity vulnerability due to its potential for remote code execution via SQL injection.
2
How do I fix CVE-2015-6329?
To fix CVE-2015-6329, upgrade Cisco Prime Collaboration Provisioning to a patched version provided by Cisco.
3
Who is affected by CVE-2015-6329?
CVE-2015-6329 affects users of Cisco Prime Collaboration Provisioning versions 10.6.0 and 11.0.0.
4
What type of vulnerability is CVE-2015-6329?
CVE-2015-6329 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
Can CVE-2015-6329 be exploited remotely?
Yes, CVE-2015-6329 can be exploited remotely by authenticated users.