CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

CVE-2017-3808

Cisco Unified Communications Manager (CUCM) is affected by a DoS vulnerability in the SIP UDP throttling process caused by insufficient rate limiting. An unauthenticated, remote attacker can trigger reloads on the device by sending a high rate of SIP messages, leading to automatic restart of the ...

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

Cisco Unified Communications Manager UDP Handling Denial of Service Vulnerability

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager has a security vulnerability in the Session Initiation Protocol SIP UDP throttling process, which could be exploited by a remote attacker to submit a special reque...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to obtain information about the operating system.

The vulnerability in the web interface of the Cisco Unified Communications Manager system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to obtain information about the operating system through cross-sit...

Cisco Unified Communications Manager Denial of Service Vulnerability (cisco-sa-20170419-ucm)

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. Copyright C 2017 Greenbone Networks GmbH Some te...

Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...

CVE-2017-3888

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3886

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

CVE-2017-3888

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3886

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

CVE-2017-3888

The CVE-2017-3888 entry concerns Cisco Unified Communications Manager (CUCM) and describes a reflected cross-site scripting (XSS) vulnerability in the web-based management interface. The issue requires an authenticated administrator and can lead to script execution in the browser of a user access...

CVE-2017-3886

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

CVE-2017-3886

CVE-2017-3886 maps to Cisco Unified Communications Manager SQL Injection via the web interface. The vulnerability is triggered by an authenticated administrative user who can execute arbitrary SQL queries, potentially compromising confidentiality. Affected releases include 1.0(1.10000.10) and 11....

CVE-2017-3888

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170405-ucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attac against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbone...

Cisco Unified Communications Manager SQL Injection Vulnerability (cisco-sa-20170405-ucm)

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The attacker must be authenticated as an administrative user to execute SQL database queries...

Local Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-04873)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A local command injection vulnerability exists in Cisco Unified Communications Manager, which could be exploited by a local attacker to submit a special request and execute arbitrary shell commands...