Every CVE Search/ Get API key

CVE-2015-0754

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause...

7.5 High

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Exploit likelihood

1.96%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Record
CVE-2015-0754
CVSS 2.0
7.5 HighAV:N/AC:L/Au:S/C:P/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Record
CVE-2015-0754
Updated
2026-11-02
EUVDEUVD-2015-0767 No score

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Record
EUVD-2015-0767
Updated
2026-11-03
GitHub AdvisoriesGHSA-gffc-hhrm-xfv2 No score

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause...

Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Record
GHSA-gffc-hhrm-xfv2
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-0754 is a high vulnerability (CVSS 7.5) in Cisco Finesse, published May 29, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.

References

MoveEnter Open