CVE-2020-14574

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14580

CVE-2020-14580 affects Oracle Communications Session Border Controller (Oracle Communications Applications, component: System Admin) in versions 8.1.0, 8.2.0 and 8.3.0. The description indicates an easily exploitable vulnerability that allows a low-privilege attacker with network access via SSH t...

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

CVE-2020-14574

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-14563

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-14563

CVE-2020-14563 affects Oracle Enterprise Communications Broker WebGUI (versions 3.0.0–3.2.0). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the broker, with exploitation requiring user interaction. CVSS‑3.1 base score is 6.1 (Confidentiality and I...

CVE-2020-14563

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Enterprise Communications Broker

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in the WebGUI component in Oracle Enterprise Communications Broker 3.0.0-3.2.0. An attacker could exploit the...

Unspecified Vulnerability in Oracle Communications Applications Enterprise Communications

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in Oracle Communications Applications Enterprise Communications. An attacker could exploit the vulnerability to...

Unspecified Vulnerability in Oracle Communications Applications Enterprise Session Border Controller

Oracle Communications Session Border Controller SBC helps service providers deliver trusted, carrier-grade, real-time communications. A security vulnerability exists in Oracle Communications Applications Enterprise Session Border Controller. An attacker could exploit the vulnerability to gain...

Information Disclosure Vulnerability in Multiple Siemens Products

SIMATIC HMI Panels are used for operator control, machine and plant monitoring.SIMATIC WinCC Runtime Advanced is a visual runtime platform, machine and plant monitoring.SIPLUS extreme products are designed to be operable under extreme conditions and are based on Imatic, LOGO! SITOP, SINAMICS,...

Unspecified Vulnerability in Oracle Enterprise Communications Broker (CNVD-2020-54680)

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in the WebGUI component in Oracle Enterprise Communications Broker 3.0.0-3.2.0. An attacker could exploit the...

Cisco Unified Communications Manager Stored Cross-Site Scripting (cisco-sa-cucm-xss-bLZw4Ctq)

According to its self-reported version, Cisco Unified Communications Manager is affected by a Cross-Site Scripting vulnerabilities. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful exploit could allow the attack...

CVE-2020-3282

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...

CVE-2020-3282 Cisco Unified Communications Products Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...

CVE-2020-3282 Cisco Unified Communications Products Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...

CVE-2020-3282

CVE-2020-3282 affects Cisco Unified Communications Manager family (including Session Management Edition, IM&P Service, Unity Connection) where the web-based management interface fails to validate user-supplied input, enabling unauthenticated remote attackers to perform cross-site scripting (XSS) ...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Cisco Warns of High-Severity Bug in Small Business Switch Lineup

Cisco Systems is warning of a high-severity flaw affecting more than a half-dozen of its small business switches. The flaw could allow remote, unauthenticated attackers to access the switches’ management interfaces with administrative privileges. Specifically affected are Series Smart Switches,...