CVE-2017-6704: A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an au...

Security readout for executives and security teams

Cisco Prime Collaboration Provisioning had a web application flaw that let a logged-in remote user download arbitrary files from the server filesystem. That could expose configuration, credentials, logs, or other sensitive operational data. The bundle names release 12.1 as affected, but does not provide CVSS or patch details. Exposure is likely limited to organizations running Cisco Prime Collaboration Provisioning, especially release 12.1, with user access to the web application. Risk depends heavily on account access, network reachability, and filesystem data accessible to the application. Treat this as a targeted data exposure risk for legacy Cisco collaboration management environments. It is not proven actively exploited in the provided bundle, but authenticated file read can disclose sensitive operational data. Prioritize inventory and vendor-guided remediation where the product remains deployed. Mitigation focus: Identify any Cisco Prime Collaboration Provisioning deployments and versions.; Check Cisco advisory guidance for fixed releases or official workarounds.; Restrict web application access to trusted administrative networks..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.