Cisco Unified Communications Domain Manager Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager CUCDM could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed requests by the self-service application on an affected CUCDM device. An...

Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

Cisco Unified Communications Domain Manager is an enterprise-class IP telephony call-processing system from the American company Cisco Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Domain Manager versions prior to 10.6. It allows a remote attacker to...

CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

CVE-2015-6352

Cisco Unified Communications Domain Manager (UCD) before version 10.6(1) is affected by an information-disclosure vulnerability where error messages for pathname access differ depending on whether the path exists. This enables remote attackers to map the filesystem by issuing a sequence of reques...

Cisco Unified Communications Domain Manager URI Enumeration Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to map a file system structure. The vulnerability is due to different handling of existent and nonexistent paths. An attacker could exploit this vulnerability by enumerating all possible...

CVE-2015-4196

Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...

CVE-2015-4196

CVE-2015-4196 affects Cisco Unified Communications Domain Manager (CDM) Platform Software before 4.4.5 (CDM 8.x). The root cause is a hardcoded privileged account password that allows an unauthenticated, remote attacker to obtain root access by SSHing with that credential. Impact stated as full c...

Cisco Unified Communications Domain Manager Default Static Privileged Account Vulnerability

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. The Cisco Unified Communications Domain Manager Platform has a privileged account with a default static password, which can be exploited by an unauthenticated, remote attacker to log in with root user...

Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials

A vulnerability in the Cisco Unified Communications Domain Manager Platform Software could allow an unauthenticated, remote attacker to login with the privileges of the root user and take full control of the affected system. The vulnerability occurs because a privileged account has a default and...

CVE-2015-4229

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

Design/Logic Flaw

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

CVE-2015-4229

Cisco Unified Communications Domain Manager 8.1(4)ER1 contains an information-disclosure vulnerability in the web framework (bvsmweb directory) that allows unauthenticated remote attackers to obtain sensitive information due to insufficient access controls (Bug ID CSCuq22589). Multiple sources (C...

CVE-2015-4229

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software could allow an unauthenticated, remote attacker to access content in the bvsmweb directory. The vulnerability is due to insufficient access controls. An attacker could exploit this vulnerabili...

Cisco SSH Key Flaw Has Echoes of Earlier Vulnerabilities

When Cisco released a patch for several of its security appliances Thursday that eliminated the presence of hard-coded SSH host and private keys, the advisory had a distinct air of familiarity about it. That’s because the company released a patch for the same problem in one of its other major...

CVE-2015-0683

Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744...

CVE-2015-0682

Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168...

Sql injection

SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515...

Information disclosure

Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744...

CVE-2015-0682

Cisco Unified Communications Domain Manager 8.1(4) is affected by CVE-2015-0682 (Bug CSCup90168). The issue allows an authenticated, remote attacker to execute arbitrary code by visiting a deprecated page, as described in Cisco’s advisory Cisco-SA-20150331-CVE-2015-0682. Connected documents corro...