# CVEs published 2015-08-01

18 CVEs were published on August 1, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1009](https://cve.now/CVE-2015-1009.md): Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext… (no CVSS)
- [CVE-2015-1486](https://cve.now/CVE-2015-1486.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass… (no CVSS)
- [CVE-2015-1487](https://cve.now/CVE-2015-1487.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write… (no CVSS)
- [CVE-2015-1488](https://cve.now/CVE-2015-1488.md): An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows… (no CVSS)
- [CVE-2015-1489](https://cve.now/CVE-2015-1489.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain… (no CVSS)
- [CVE-2015-1490](https://cve.now/CVE-2015-1490.md): Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows… (no CVSS)
- [CVE-2015-1491](https://cve.now/CVE-2015-1491.md): SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows… (no CVSS)
- [CVE-2015-1492](https://cve.now/CVE-2015-1492.md): Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain… (no CVSS)
- [CVE-2015-1904](https://cve.now/CVE-2015-1904.md): IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when… (no CVSS)
- [CVE-2015-2870](https://cve.now/CVE-2015-2870.md): Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers… (no CVSS)
- [CVE-2015-2871](https://cve.now/CVE-2015-2871.md): Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify communication… (no CVSS)
- [CVE-2015-2890](https://cve.now/CVE-2015-2890.md): The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices… (no CVSS)
- [CVE-2015-4289](https://cve.now/CVE-2015-4289.md): Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to… (no CVSS)
- [CVE-2015-4291](https://cve.now/CVE-2015-4291.md): Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded… (no CVSS)
- [CVE-2015-4292](https://cve.now/CVE-2015-4292.md): Cross-site scripting (XSS) vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS)… (no CVSS)
- [CVE-2015-4294](https://cve.now/CVE-2015-4294.md): Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2015-4295](https://cve.now/CVE-2015-4295.md): The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to… (no CVSS)
- [CVE-2015-5618](https://cve.now/CVE-2015-5618.md): Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a)… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.