CVE-2015-4315

The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows…

published August 20, 2015

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows remote authenticated users to read arbitrary files or cause a denial of service via a crafted XML document, aka Bug ID CSCuv31853.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01871 · 79.2th percentile
Published
2015-08-20T00:00Z
EPSS history
Timeline
  • 20 AUG 00:00Z
    The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DTDs, which allows…
    cvelistv5