CVE-2015-0581
Last modified
CVE-2015-0581 is a vulnerability of currently unknown severity. The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.. EPSS estimates a 2.37% chance of exploitation in the next 30 days.
Description
The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Prime Service Catalog | <= 10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-0581?
How severe is CVE-2015-0581?
How do I fix CVE-2015-0581?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-0575In all Qualcomm products with Android releases from CAF usin…
- CVE-2015-0576In all Qualcomm products with Android releases from CAF usin…
- CVE-2015-0577Multiple cross-site scripting (XSS) vulnerabilities in the I…
- CVE-2015-0578Cisco Adaptive Security Appliance (ASA) Software, when a DHC…
- CVE-2015-0579Cisco TelePresence Video Communication Server (VCS) and Cisc…
- CVE-2015-0580Multiple SQL injection vulnerabilities in the ACS View repor…
- CVE-2015-0582The High Availability (HA) subsystem in Cisco NX-OS on MDS 9…
- CVE-2015-0583Cisco WebEx Meeting Center does not properly restrict the co…
- CVE-2015-0584The image-upgrade implementation on Cisco Desktop Collaborat…
- CVE-2015-0586The Network-Based Application Recognition (NBAR) protocol im…
- CVE-2015-0588Cross-site request forgery (CSRF) vulnerability in Cisco Uni…
- CVE-2015-0589The administrative web interface in Cisco WebEx Meetings Ser…
Are you affected by CVE-2015-0581?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST