CVE-2015-0702

VendorciscoProductunified meetingplaceDiscoveredApr 21, 2015UpdatedMay 6, 2026

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.

View graph Watch Export

CVSS v3.1

—

EPSS

2.92%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

2 relationships

CWE-20

source

Timeline

disclosure → media coverage

Apr 21, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026