Cisco Prime Collaboration CVE-2015-4188 SQL Injection Vulnerability

Bugtraq ID:	75268
Class:	Input Validation Error
CVE:	CVE-2015-4188
Remote:	Yes
Local:	No
Published:	Jun 16 2015 12:00AM
Updated:	Nov 03 2015 07:05PM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Prime Collaboration CVE-2015-4188 SQL Injection Vulnerability

Cisco Prime Collaboration is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

This issue being tracked by Cisco Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104.

Cisco Prime Collaboration CVE-2015-4188 SQL Injection Vulnerability

Attackers can exploit this issue using browser.

Cisco Prime Collaboration CVE-2015-4188 SQL Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Prime Collaboration CVE-2015-4188 SQL Injection Vulnerability

References:

• Vulnerability Alert: Cisco Prime Collaboration Manager SQL Injection Vulnerabil (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Prime Collaboration Homepage (Cisco)