CVE-2015-0620

Published: Feb 18, 2015Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.

Affected (3)

Products: Cisco: Telepresence Management Suite

Cisco

1 product

Telepresence Management Suite

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Telepresence Management Suite	Up to 14.3\(.2\)
Cisco Telepresence Management Suite	Version 14.3
Cisco Telepresence Management Suite	Version 14.3(.1)

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0620

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=37491

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1031753

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/100924

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0620

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=37491

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1031753

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/100924

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.