CVE-2015-0702

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-21 · updated 2026-06-17
Weakness: CWE-20

Description

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.

Affected products

Cisco Unified Meetingplace: 8.6(1.9)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38455
http://www.securitytracker.com/id/1032165
http://tools.cisco.com/security/center/viewAlert.x?alertId=38455
http://www.securitytracker.com/id/1032165

Get alerted when CVE-2015-0702 or the next vulnerability affects your stack