Vulnerabilities > Cisco > Policy Suite > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-18 CVE-2018-0089 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Policy Suite 10.0.0/11.0.0/11.1.0
A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthenticated, remote attacker to access sensitive data.
network
low complexity
cisco CWE-732
7.5
2017-05-18 CVE-2017-6623 Improper Privilege Management vulnerability in Cisco Policy Suite 10.0.0/10.1.0/11.0.0
A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance could allow an authenticated, local attacker to escalate their privilege level to root.
local
low complexity
cisco CWE-269
7.8