# CVEs published 2015-02-18

8 CVEs were published on February 18, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0108](https://cve.now/CVE-2015-0108.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 (no CVSS)
- [CVE-2015-0109](https://cve.now/CVE-2015-0109.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 (no CVSS)
- [CVE-2015-0617](https://cve.now/CVE-2015-0617.md): Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and (no CVSS)
- [CVE-2015-0620](https://cve.now/CVE-2015-0620.md): The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows re (no CVSS)
- [CVE-2015-0621](https://cve.now/CVE-2015-0621.md): Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an unspecifie (no CVSS)
- [CVE-2015-1355](https://cve.now/CVE-2015-1355.md): Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cl (no CVSS)
- [CVE-2015-1356](https://cve.now/CVE-2015-1356.md): Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity pro (no CVSS)
- [CVE-2015-1358](https://cve.now/CVE-2015-1358.md): The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced functionality in Siemens SIMATIC WinCC (TIA Po (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.