CVE-2015-4188: SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote att...

Security readout for executives and security teams

CVE-2015-4188 is a SQL injection issue in the Cisco Prime Collaboration Manager interface, reported for version 10.5(1). An attacker who can reach the interface may be able to send a crafted URL that runs unintended database commands. Public sources do not show CISA KEV listing or confirmed active exploitation. Exposure is most likely where Cisco Prime Collaboration Manager 10.5(1) is deployed and its Manager interface is reachable by untrusted users or networks. Internet exposure would increase risk. The provided data does not confirm other affected versions. Prioritize if Cisco Prime Collaboration Manager 10.5(1) is in use, especially if the Manager interface is broadly reachable. SQL injection in a management application can threaten data integrity and system administration. If the product is not deployed, no action is needed beyond documentation. Mitigation focus: Identify any Cisco Prime Collaboration Manager 10.5(1) deployments.; Review Cisco advisory alertId 39365 for fixed releases or workarounds.; Apply Cisco-recommended updates or configuration changes when confirmed..

Prepared

Jun 13, 2026, 23:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.