VIR Vulnerability Intelligence Relay

CVE-2016-1437

medium
Published 2016-06-23 · Modified 2026-05-06
CVSS v3
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2
4.0
VIR risk
6.5

Description

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549.

Predictions

Exploit likelihood
75%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd

Application impact
VendorProductVersionsFixed
cisco ciscoprime_collaboration_deployment10.5.0
cisco ciscoprime_collaboration_deployment10.5.1
cisco ciscoprime_collaboration_deployment11.0_base
cisco ciscoprime_collaboration_deployment11.5.0

References

CWEs

CWE-89

Verify integrity in audit chain (admin only). AS-IS.