CVE-2017-3798

Cisco Unified Communications Manager is affected by CVE-2017-3798: a cross-site scripting (XSS) filter bypass in the web-based management interface that could allow an unauthenticated, remote attacker to run XSS in a user’s browser. Root cause: failure to properly invoke the XSS filter subsystems...

CVE-2017-3802

The CVE-2017-3802 entry describes a cross-site scripting (XSS) vulnerability in Cisco Unified Communications Manager (CUCM) web interface. An unauthenticated, remote attacker could exploit this to execute arbitrary script code in a user’s browser. Affected release: 12.0(0.99000.9). Fixed releases...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-01082)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager that stems from a failure to validate user input. An attacker could use this vulnerability to execute arbitrary...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170118-cucm)

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. Copyright C 2017 Greenbone Networks GmbH Some text...

Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability (cisco-sa-20170118-cucm1)

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability

Cisco Unified Communications Manager CUCM contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to a failure to properly call XSS filter...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. The vulnerability is due to a failure to properly call XS...

Merlin@home Man-in-the-Middle Security Bypass Vulnerability

St.JudeMedicalMerlin@hometransmitter是美国St.JudeMedical公司的一款用于对植入心脏装置的患者进行远程护理管理的产品. A man-in-the-middle security bypass vulnerability exists in Merlin@home. A remote attacker could exploit this vulnerability to access or affect communications between Merlin.net and the transmitter terminal...

Lawmakers Reintroduce Popular Email Privacy Act

A group of bipartisan lawmakers reintroduced the Email Privacy Act, a bill that would require law enforcement to get a warrant before searching email, Facebook messages and files stored on cloud services no matter how old the archives. The Email Privacy Act is an attempt to reform the decade-old...

Description of the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: April 2010

Describes the issues that are fixed in the cumulative update for Office Communications Server 2007 R2, Conferencing Attendant: April 2010.SummaryThis article describes the Office Communications Server 2007 R2, Conferencing Attendant issues that are fixed in the Office Communications Server 2007 R...

Description of the cumulative update for Office Communications Server 2007 R2, Outside Voice Control: April 2010

Describes the issues that are fixed in the cumulative update for Office Communications Server 2007 R2, Outside Voice Control: April, 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Outside Voice Control issue that is fixed in the update package for...

Description of the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: April 2010

Discusses the issues that are fixed in the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: April 2010.SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Conferencing Server that i...

Description of the cumulative update for Office Communications Server 2007 R2, Mediation Server: April 2010

Describes the issues that are fixed in the cumulative update package for Office Communications Server 2007 R2, Mediation Server that is dated April 2010.SummaryThis article describes the Office Communications Server 2007 R2, Mediation Server issues that are fixed in the Office Communications Serv...

Description of the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: April 2010

Describes the issues that are fixed in the cumulative update package for Office Communications Server 2007 R2, Audio/Video Conferencing Server: April 2010SummaryThis article describes the issue that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Audio/Video...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: January 2010

Describes the issues that are fixed in the Office Communications Server 2007 R2, Core Components cumulative update that is dated January 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Core Components issues that are fixed in the cumulative update for...

Description of the cumulative update package for Office Communications Server 2007 R2, Application Sharing Server: April 2010

Describes the issues that are fixed in the Office Communications Server 2007 R2, Application Sharing Server update package that is dated April 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Application Sharing Server issues that are fixed in the cumulative...

Description of the cumulative update package for Office Communications Server 2007 R2, Communicator Web Access: April 2010

Describes the issue that is fixed in the Office Communications Server 2007 R2, Communicator Web Access update package that is dated April 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Microsoft Office Communicator Web Access issues that are fixed in the...

Description of the cumulative update for Office Communications Server 2007 R2, Response Group Service: October 2009

Describes the issue that is fixed in the Office Communications Server 2007 R2, Response Group Service hotfix package that is dated October 2009.SummaryThis article describes the Cumulative Update for Microsoft Office Communications Server 2007 R2, Response Group Service issues that are fixed in t...

Description of the cumulative update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit: January, 2012

Describes the cumulative update for Microsoft Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Core Redist 64-bit that is dated January 2012.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Unified Communications...

Description of the cumulative update for Office Communications Server 2007 R2, Core Components: September 2011

Describes the cumulative update for Office Communications Server 2007 R2, Core Component that is dated September 2011.SummaryThis article describes the cumulative update for Microsoft Office Communications Server 2007 R2, Core Component that is dated September 2011. ResolutionUpdate package...