VULNERABILITY INTELLIGENCE

CVE-2015-0702

CVSS score9 HIGH
EPSS probability2.92%
CISA KEVNot currently listed
Published2015-04-21
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references