CVE

Id
77844  
CVE No.
CVE-2015-0581  
Status
Candidate  
Description
The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
713206 77844 CVE-2015-0581 CISCO:20150128 Cisco Prime Service Catalog XML External Entity Processing Vulnerability  View
713207 77844 CVE-2015-0581 URL:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-psc-xmlee  View
713208 77844 CVE-2015-0581 BID:72350  View
713209 77844 CVE-2015-0581 URL:http://www.securityfocus.com/bid/72350  View
713210 77844 CVE-2015-0581 SECTRACK:1031658  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6308 JVNDB-2015-001628 C-Series サーバ上で稼動する Cisco Unified Computing System の Integrated Management Controller におけるアクセス制限を回避される脆弱性 C-Series サーバ上で稼動する Cisco Unified Computing System (UCS) の Integrated Management Controller (IMC) には、アクセス制限を回避される脆弱性が存在します。 CVE-2015-0633 77844 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001628.html  View