Unrated severityNVD Advisory· Published Feb 18, 2015· Updated May 6, 2026

CVE-2015-0620

Description

The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.

Affected products

Cisco Systems, Inc./Telepresence Management Suite3 versions
cpe:2.3:a:cisco:telepresence_management_suite:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cisco:telepresence_management_suite:*:*:*:*:*:*:*:*range: <=14.3\(.2\)
- cpe:2.3:a:cisco:telepresence_management_suite:14.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:telepresence_management_suite:14.3\(.1\):*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0620nvdVendor Advisory
tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
www.securitytracker.com/id/1031753nvd
exchange.xforce.ibmcloud.com/vulnerabilities/100924nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000