The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface relates to insufficient protection for saved passwords during the loading of configuration pages. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code or gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to protected information through a specially crafted malicio...

Code injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0474

Cisco Unified Communications Manager contains a vulnerability in its web-based management interface where saved passwords are inappropriately included in configuration pages, allowing an authenticated remote attacker to view digest credentials by inspecting page source. This could enable password...

CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2019-01372)

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution. An information disclosure vulnerability exists in the web-based...

Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

The vulnerability of the XCP Router service in Cisco Unified Communications Manager IM and Presence Service, as well as the Cisco TelePresence Video Communication Server, allows a perpetrator to induce a service failure.

The vulnerability of the XCP Router service in Cisco Unified Communications Manager IM and Presence Service, as well as the Cisco TelePresence Video Communication Server, stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failure...

Cisco Unified Communications Manager IM & Presence Service Apache Struts RCE (CSCvm14049)

According to its self-reported version, the Cisco Unified Communications Manager IM & Presence Service is affected by a Remote Code Execution vulnerability. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Cisco Unified Communication Manager Apache Struts RCE (CSCvm14042)

According to its self-reported version, the Cisco Unified Communications Manager CUCM running on the remote device is affected by a remote code execution vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...

Cisco Unified Communications Manager Denial-of-Service Vulnerability (DoS)

According to its self-reported version, the Cisco Unified Communications Manager is affected by a Denial-of-Service vulnerability. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM is a call processing component of a unified communications system from Cisco.Cisco Unified Communications Manager IM and Presence Cisco Unified Communications Manager IM and Presence Service is a CUCM-based instant messaging IM and status...

Input validation

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

CVE-2018-0409

CVE-2018-0409 affects the XCP Router in Cisco CUCM IM&P and in Cisco TelePresence VCS/Expressway. The issue arises from improper validation of user-supplied input, allowing an unauthenticated remote attacker to send crafted IPv4/IPv6 packets to TCP port 7400, overreading a buffer and causing the ...

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2018-16185)

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution. A reflective cross-site scripting vulnerability exists in the...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...