Cisco Unified Communications Manager IM and Presence Service EST API Denial of Service Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Unified Communications Manager IM and Presence Detect

This script performs ssh based detection of Cisco Unified Communications Manager IM and Presence SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Cisco Unified Communications Manager (CUCM) Detection (SSH Login)

SSH login-based detection of Cisco Unified Communications Manager CUCM, formerly Call Manager Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

Cisco Unified Communications Manager SQLi Vulnerability (cisco-sa-20160203-ucm)

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from ...

Cisco Unified Communications Manager Information Disclosure Vulnerability (cisco-sa-201600208-ucm)

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cisco Video Communications Server Information Disclosure Vulnerability (cisco-sa-20160208-vcs)

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. SPDX-FileCopyrightText: 2016 Greenbone AG Some tex...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01062)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager 11.5 0.98000.480 that could allow an authenticated, remote user to obtain sensitive database table...

Cisco Unified Communications Manager SQL Injection Vulnerability

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. A SQL injection vulnerability in Cisco Unified Communications Manager 10.5 allows a remote, authenticated user to execute arbitrary SQL commands via a crafted URL...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01056)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager that could allow an attacker to obtain sensitive information via unspecified vectors...

CVE-2016-1319

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

CVE-2016-1317

Cisco Unified Communications Manager 11.50.98000.480 allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098...

CVE-2016-1317

Cisco Unified Communications Manager 11.50.98000.480 allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098...

Information disclosure

Cisco Unified Communications Manager 11.50.98000.480 allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098...

CVE-2016-1319

CVE-2016-1319 concerns Cisco Unified Communications Manager and related products (CUCM, IM&P, UCCX, Unity Connection) that store a cleartext encryption key, enabling local users to obtain sensitive information via unspecified vectors. Root cause is improper key management allowing plaintext key e...

CVE-2016-1317

Cisco Unified Communications Manager (UCM) 11.5(0.98000.480) is affected by an information disclosure vulnerability. An authenticated, remote attacker could exploit a flaw in the web framework by requesting an unspecified URL to view sensitive data, specifically database table names and entity na...

CVE-2016-1317

Cisco Unified Communications Manager 11.50.98000.480 allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098...

CVE-2016-1319

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

Cisco Video Communications Server Information Disclosure Vulnerability

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. The vulnerability exists due to a failure to...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. An...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...