CVE-2020-27121

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2020-27121

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

Race condition

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2020-27121 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2020-27121 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2020-27121

CVE-2020-27121 concerns Cisco Unified Communications Manager IM&P (XCP Authentication Service). An authenticated remote attacker can trigger a restart of the XCP Authentication Service by sending crafted login requests, causing DoS for new login attempts. Root cause is improper handling of login ...

Cisco Unified Communications Manager IM and Presence Service DoS (cisco-sa-imp-dos-uTx2dqu2)

According to its self-reported version, Cisco Unified Communications Manager IM and Presence Service is affected by a vulnerability due to improper handling of login requests. An authenticated, remote attacker can exploit this, by sending a crafted client login request to an affected device, in...

Cisco Integrated Management Controller Authorization Bypass (cisco-sa-cimc-auth-zWkppJxL)

According to its self-reported version, Cisco Unified Computing System Management Software is affected by an authorization bypass vulnerability due to improper authorization checks on API endpoints. An authenticate, remote attacker can exploit this issue, by sending malicious requests to an API...

Vulnerabilities fixed in Cisco Unified Communications Manager

Due to a vulnerability in Cisco Unified Communications Manager -software, an authenticated remote malicious party could cause the Cisco XCP Authentication Service on an affected device to be restarted, resulting in a Denial-of-Service DoS. Cisco has released an update to fix the vulnerability. Mo...

Cisco Unified IP Conference Station 7937G Denial of Service (CVE-2020-16139)

A denial-of-service vulnerability exists in Cisco Unified IP Conference Station 7937G. Successful exploitation of this vulnerability could cause a denial-of-service condition...

CVE-2020-27121

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

Cisco Unified Contact Center Express Insecure Deserialization (CVE-2020-3280)

An insecure deserialization vulnerability exists in the Cisco Unified Contact Center Express. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-25483

An arbitrary command execution vulnerability exists in the fopen function of file writes of UCMS v1.4.8, where an attacker can gain access to the server...

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

CVE-2020-6933

An improper input validation vulnerability in the UEM Core of BlackBerry UEM versions 12.13.0, 12.12.1a QF2 and earlier, and 12.11.1 QF3 and earlier could allow an attacker to potentially cause a Denial of Service DoS of the UEM Core service...

Guide: Scale or Fail — Why MSSPs Need Multitenant Security Solutions

Managed Security Services Providers MSSPs have it rough. They have the burden of protecting their client organizations from cyberattacks, with clients from different industries, different security stacks, and different support requirements. And everything is in a constant state of flux. MSSPs are...

The vulnerability in the Web UI of the Cisco Unified Communications Manager system, as well as the Cisco Unified Communications Manager Session Management Edition (SME) system for managing IP telephony, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Web UI of the Cisco Unified Communications Manager system, as well as the Cisco Unified Communications Manager Session Management Edition SME system for managing IP telephony, is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability cou...

Vulnerability fixed in Blackberry Unified Endpoint Management

Blackberry has fixed a vulnerability in Blackberry Unified Endpoint Management UEM. A malicious party with network access to the UEM server could potentially exploit the vulnerability to cause a denial-of-service exploit on UEM Core. Blackberry has released updates to fix the vulnerability fix in...

The vulnerability in the web interface of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager call processing system, and the integrated Cisco Unity Connection messaging system allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the Web interface of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Unified Communications Manager IM & Presence Service, and the integrated Cisco Unity Connection messaging system is related to the lack of...