Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2015-05103)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager 10.5 3.10000.9 has a security vulnerability in the implementation of the Prime Collaboration Deployment component, which can be exploited by an authenticated remot...

CVE-2015-4295

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

CVE-2015-4295

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

CVE-2015-4295

Cisco Unified Communications Manager 10.5(3.10000.9) Prime Collaboration Deployment contains an Information Disclosure vulnerability. An authenticated remote attacker can view root credentials via a direct request to an unspecified URL due to insufficient protections of data at rest, potentially ...

[SECURITY] Fedora 22 Update: openssh-6.9p1-4.fc22

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability

A vulnerability in the Prime Collaboration Deployment of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protections of data at rest. An attacker could exploit this vulnerability by browsing to a...

[SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager (CNVD-2015-04702)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can ...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2015-04698)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A security vulnerability exists in Cisco Unified Communications Manager that allows authenticated users to submit AVVID XML LAYER session requests at a special high rate, making the target...

CVE-2015-4272

Multiple cross-site scripting XSS vulnerabilities in the ccmivr page in Cisco Unified Communications Manager formerly CallManager 10.52.10000.5 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580...

CVE-2015-4269

The Tomcat throttling feature in Cisco Unified Communications Manager 10.51.99995.9 allows remote authenticated users to cause a denial of service management outage by sending many requests, aka Bug ID CSCuu99709...

Code injection

The Tomcat throttling feature in Cisco Unified Communications Manager 10.51.99995.9 allows remote authenticated users to cause a denial of service management outage by sending many requests, aka Bug ID CSCuu99709...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the ccmivr page in Cisco Unified Communications Manager formerly CallManager 10.52.10000.5 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580...

CVE-2015-4272

Multiple cross-site scripting XSS vulnerabilities in the ccmivr page in Cisco Unified Communications Manager formerly CallManager 10.52.10000.5 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580...

CVE-2015-4272

Cisco Unified Communications Manager (CallManager) 10.5(2.10000.5) ccmivr page contains cross-site scripting (XSS) vulnerabilities due to insufficient input validation in several parameters. An unauthenticated, remote attacker could entice a user to follow a crafted link to inject arbitrary scrip...

CVE-2015-4269

The Tomcat throttling feature in Cisco Unified Communications Manager 10.51.99995.9 allows remote authenticated users to cause a denial of service management outage by sending many requests, aka Bug ID CSCuu99709...

CVE-2015-4269

Cisco Unified Communications Manager 10.5(1.99995.9) contains a DoS vulnerability in the Tomcat throttling feature. An authenticated, remote attacker can trigger the issue by sending a high rate of requests, causing the management page to become slow or unresponsive. The Cisco advisory notes that...

Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the Tomcat service throttling mechanism of the Cisco Unified Communications Manager could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to sending multiple authenticated requests to Cisco Unified Communications...

Cisco Unified Communications Manager ccmivr Page Cross-Site Scripting Vulnerability

A vulnerability in several parameters of the ccmivr page of Cisco Unified Communications Manager, formerly known as CallManager, could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on an affected system. The vulnerabilit...

[SECURITY] Fedora 22 Update: openssl-1.0.1k-11.fc22

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...