The vulnerability in the web interface of the Cisco Unified Communications Manager system, the Cisco Unified Communications Manager Session Management Edition (SME) system, the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) call management system, the integrated Cisco Unity Connection messaging system, and the cloud-based web conference platform Cisco Webex Calling Dedicated Instance allows a malicious actor to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability in the web interface of the Cisco Unified Communications Manager system, the Cisco Unified Communications Manager Session Management Edition SME system, the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P system, the integrated messaging system Cisco...

CVE-2026-20045

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

EUVD-2014-7849

Malware in sbrugna...

EUVD-2015-4317

Malware in sbrugna...

Cisco Unified Communications Manager 安全漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco USA. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution. A security vulnerability...

Cisco Unified Communications Manager 安全漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution. A security vulnerability exists...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the Web interface for managing the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

CVE-2020-27121

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

PT-2019-3812

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager SME versions affected versions not specified Unified Communications Manager IM and Presence Service versions affected versions n...

PT-2019-2343

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service affected versions not specified Cisco TelePresence Video Communication Server affected versions not specified Cisco Expressway Series affected versions not specified Description A...

PT-2018-1536

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions affected versions not specified Cisco TelePresence Video Communication Server versions affected versions not specified Description The issue is caused by insufficient input...

CVE-2018-0396: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to...

PT-2018-8810

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service software affected versions not specified Description A vulnerability in the web framework could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack...

PT-2016-6936

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 11.51 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to view information on web pages that should be restricted...

CVE-2016-6464: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

PT-2016-4814

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service versions 9.11 SU6 through 9.11 SU7, 10.52 SU2 through 10.52 SU2a, 11.01 SU1, 11.51 Description The issue allows remote attackers to cause a denial of service, resulting in the restar...

CVE-2016-1466: Undefined Security Weakness

Cisco Unified Communications Manager IM and Presence Service 9.11 SU6, 9.11 SU6a, 9.11 SU7, 10.52 SU2, 10.52 SU2a, 11.01 SU1, and 11.51 allows remote attackers to cause a denial of service sipd process restart via crafted headers in a SIP packet, aka Bug ID CSCva39072...

Cisco Unified Communications Manager IM and Presence Service EST API Denial of Service Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Unified Communications Manager IM and Presence Detect

This script performs ssh based detection of Cisco Unified Communications Manager IM and Presence SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

PT-2015-7173

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 11.51 Description The issue allows remote attackers to cause a denial of service, resulting in the restart of the SIP proxy service, via a crafted HTTP request to the REST...