Known vulnerabilities in Cisco Prime Service Catalog

Vendor: Cisco Systems, Inc

Software: Cisco Prime Service Catalog

Software CPE: cpe:2.3:a:cisco_systems:cisco_prime_service_catalog:*:*:*:*:*:*:*:*

Website: https://www.cisco.com

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 6.9

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU60241 - Exposure of sensitive information to an unauthorized actor CVE-2022-20680	CWE-200	Low	No	No	12.1 patch v18	02.02.2022	SB2022020208
#VU15764 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-15451	CWE-79	Low	No	No	12.1 patch v5	07.11.2018	SB2018110811
#VU12371 - Resource exhaustion CVE-2018-0285	CWE-400	Low	No	No	-	07.05.2018	SB2018050713
#VU10689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-0200	CWE-79	Low	No	No	-	21.02.2018	SB2018022210
#VU10122 - Cross-Site Request Forgery (CSRF) CVE-2018-0107	CWE-352	Low	No	No	-	22.01.2018	SB2018011913
#VU9476 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-12364	CWE-89	Low	No	No	-	29.11.2017	SB2017113014
#VU226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-1462	CWE-79	Low	No	No	-	28.07.2016	SB2016072802