CVE-2015-0620 in Telepresence Management Suite
Summary
The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
01/07/2015
Disclosure
02/17/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69180 | Cisco Telepresence Management Suite XML Parser input validation | 20 | Unproven | Official fix | CVE-2015-0620 |