Realpresence Resource Manager

realpresence_resource_manager

Vendor: Polycom • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-4685 1Polycom 1Realpresence Resource Manager May 13, 2026 Sep 19, 2017 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration.
CVE-2015-4684 1Polycom 1Realpresence Resource Manager May 13, 2026 Sep 19, 2017 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to Plc...Show more Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) remote authenticated users to read arbitrary files via a .. (dot dot) in the Modifier parameter to PlcmRmWeb/FileDownload; or remote authenticated administrators to upload arbitrary files via the (2) Filename or (3) SE_FNAME parameter to PlcmRmWeb/FileUpload or to read and remove arbitrary files via the (4) filePathName parameter in an importSipUriReservations SOAP request to PlcmRmWeb/JUserManager.Show less
CVE-2015-4683 1Polycom 1Realpresence Resource Manager May 13, 2026 Sep 19, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests.
CVE-2015-4682 1Polycom 1Realpresence Resource Manager May 13, 2026 Sep 19, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installation path via an HTTP POST request to PlcmRmWeb/JConfigManager.
CVE-2015-4681 1Polycom 1Realpresence Resource Manager May 13, 2026 Sep 19, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.