NVD

Id
25780  
Name
CVE-2015-4315  
Description
The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-08-19  
Modified Date
2016-11-28  
Seq
2015-4315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136052 25780 CVE-2015-4315 20150813 Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page Denial of Service Vulnerability  View
136053 25780 CVE-2015-4315 76352  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9023 JVNDB-2015-004343 Cisco TelePresence Video Communication Server Expressway の Call Policy Configuration ページにおける任意のファイルを読まれる脆弱性 Cisco TelePresence Video Communication Server (VCS) Expressway の Call Policy Configuration ページは、外部 DTD を適切に検証しないため、任意のファイルを読まれる、またはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-4315 81540 CVE-2015-4315 25780 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004343.html 2015-08-13 2015-08-25 View