# CVEs published 2015-06-23

16 CVEs were published on June 23, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-2859](https://cve.now/CVE-2015-2859.md): Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority n (no CVSS)
- [CVE-2015-3113](https://cve.now/CVE-2015-3113.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11 (CVSS 7.8, KEV)
- [CVE-2014-4882](https://cve.now/CVE-2014-4882.md): Aptexx Resident Anywhere does not require authentication, which allows remote attackers to obtain sensitive information or modify data via a (no CVSS)
- [CVE-2015-0972](https://cve.now/CVE-2015-0972.md): Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attack (no CVSS)
- [CVE-2015-2860](https://cve.now/CVE-2015-2860.md): Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read (no CVSS)
- [CVE-2015-4189](https://cve.now/CVE-2015-4189.md): Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the au (no CVSS)
- [CVE-2015-4203](https://cve.now/CVE-2015-4203.md): Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN ar (no CVSS)
- [CVE-2015-4205](https://cve.now/CVE-2015-4205.md): Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending (no CVSS)
- [CVE-2015-4207](https://cve.now/CVE-2015-4207.md): Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypa (no CVSS)
- [CVE-2015-4209](https://cve.now/CVE-2015-4209.md): Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain se (no CVSS)
- [CVE-2015-4210](https://cve.now/CVE-2015-4210.md): Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2015-4586](https://cve.now/CVE-2015-4586.md): Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote a (no CVSS)
- [CVE-2015-4725](https://cve.now/CVE-2015-4725.md): Cross-site scripting (XSS) vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2015-4726](https://cve.now/CVE-2015-4726.md): PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2015-4200](https://cve.now/CVE-2015-4200.md): Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote (no CVSS)
- [CVE-2015-4204](https://cve.now/CVE-2015-4204.md): Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.