CVE-2021-1407

CVE-2021-1407 affects Cisco Unified Communications Manager (CUCM), Unified CM IM&P, Unified CM SME, and Cisco Unity Connection. The issue is cross-site scripting in the web-based management interface caused by improper validation of user-supplied input. An unauthenticated, remote attacker could l...

CVE-2021-1407 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1406 Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...

CVE-2021-1406

Cisco UC Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME) have an information disclosure vulnerability where downloadable files may inappropriately contain sensitive data. An authenticated attacker with elevated privileges can exploit via a targeted command sequence...

CVE-2021-1406 Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...

CVE-2021-1399 Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

CVE-2021-1399 Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

CVE-2021-1399

Cisco CVE-2021-1399 affects the Self Care Portal in Cisco Unified Communications Manager (CUCM) and CUCM Session Management Edition (CUCM SME). Root cause: insufficient validation of user-supplied data in the Self Care Portal, enabling an authenticated, remote attacker to modify data via a crafte...

CVE-2021-1380 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1380

CVE-2021-1380 covers multiple Cisco products (CUCM, CUCM IM&P, CUCM SME, Unity Connection) with web-based management interface XSS vulnerabilities caused by improper input validation. An unauthenticated, remote attacker could lure a user to click a crafted link and trigger arbitrary script execut...

CVE-2021-1380 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...

CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...

CVE-2021-1362

CVE-2021-1362 affects Cisco Unified Communications Manager family (CUCM, IM&P, Session Management Edition, Unity Connection, Prime License Manager). The vulnerability is due to improper sanitization of user-supplied input in the SOAP API endpoint, allowing an authenticated, remote attacker to sen...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2021-35517)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting...

The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—allows a perpetrator to execute arbitrary code. The Cisco Prime License Manager (PLM) licensing management tool also exposes vulnerabilities that enable a perpetrator to perform arbitrary actions.

The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—as well as the Cisco Pri...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2021-35518)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting...

Vulnerabilities found in Cisco Unified Communications Manager

Vulnerabilities have been found in Cisco Unified Communications Manager. The vulnerabilities allow a malicious party to manipulate data and obtain sensitive information. Cisco has not yet released updates to address the vulnerabilities. fix. More information can be found on the pages below:...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...

Cisco Unified Communications Manager Authorization Bypass Vulnerability

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution.Cisco Unified Communications Manager Session Management Edition is t...