CVE-2015-0620
The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:telepresence_management_suite
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0620
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37491
- http://www.securitytracker.com/id/1031753
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100924
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0620