# CVEs published 2015-08-01

18 CVEs were published on August 1, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1009](https://cve.now/CVE-2015-1009.md): Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext f (no CVSS)
- [CVE-2015-1486](https://cve.now/CVE-2015-1486.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticat (no CVSS)
- [CVE-2015-1487](https://cve.now/CVE-2015-1487.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to (no CVSS)
- [CVE-2015-1488](https://cve.now/CVE-2015-1488.md): An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remot (no CVSS)
- [CVE-2015-1489](https://cve.now/CVE-2015-1489.md): The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain pri (no CVSS)
- [CVE-2015-1490](https://cve.now/CVE-2015-1490.md): Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows r (no CVSS)
- [CVE-2015-1491](https://cve.now/CVE-2015-1491.md): SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote (no CVSS)
- [CVE-2015-1492](https://cve.now/CVE-2015-1492.md): Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privil (no CVSS)
- [CVE-2015-1904](https://cve.now/CVE-2015-1904.md): IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when exte (no CVSS)
- [CVE-2015-2870](https://cve.now/CVE-2015-2870.md): Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to (no CVSS)
- [CVE-2015-2871](https://cve.now/CVE-2015-2871.md): Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify communication co (no CVSS)
- [CVE-2015-2890](https://cve.now/CVE-2015-2890.md): The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices wi (no CVSS)
- [CVE-2015-4289](https://cve.now/CVE-2015-4289.md): Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary (no CVSS)
- [CVE-2015-4291](https://cve.now/CVE-2015-4291.md): Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Serv (no CVSS)
- [CVE-2015-4292](https://cve.now/CVE-2015-4292.md): Cross-site scripting (XSS) vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6( (no CVSS)
- [CVE-2015-4294](https://cve.now/CVE-2015-4294.md): Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2015-4295](https://cve.now/CVE-2015-4295.md): The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to di (no CVSS)
- [CVE-2015-5618](https://cve.now/CVE-2015-5618.md): Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) V (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.