11.5

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-07	CVE-2018-0317	Missing Authorization vulnerability in Cisco products A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges. network low complexity cisco CWE-862	8.8
2017-11-02	CVE-2017-12276	SQL Injection vulnerability in Cisco Prime Collaboration Provisioning A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. network low complexity cisco CWE-89	8.1