Cisco Unified Contact Center Express Command Execution Vulnerability

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A code issue vulnerability exists in Cisco...

Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

Cisco Unified Contact Center Enterprise utilizes an IP infrastructure to provide skills-based contact routing, voice self-service, computer telephony integration CTI, and multichannel contact management. A denial of service vulnerability exists in the Live Data server in Cisco Unified Contact...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

CVE-2020-3163

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

Stack overflow

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

CVE-2020-3163

The CVE-2020-3163 issue affects Cisco Unified Contact Center Enterprise (Live Data server). An unauthenticated, remote attacker can trigger resource exhaustion by sending crafted Live Data packets before a legitimate client connects, leading to a stack overflow and a reload that causes DoS. The r...

CVE-2020-3163 Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing...

Cisco Unified Contact Center Express Privilege Escalation Vulnerability

A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to upload arbitrary files and execute commands on the underlying operating system. To exploit this vulnerability, an attacker needs valid...

CVE-2015-0749

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker...

Cross site scripting

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker...

CVE-2015-0749 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker...

CVE-2015-0749

Cisco Unified Communications Manager is affected by a cross-site scripting (XSS) vulnerability due to improper input validation of certain parameters. An unauthenticated, remote attacker could lure a user to follow a malicious link, potentially allowing the attacker to execute arbitrary script co...

CVE-2015-0749 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker...

CVE-2020-8011

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot controller component. A remote attacker can crash the Controller service...

CVE-2020-8012

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot controller component. A remote attacker can execute arbitrary code...

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

CVE-2020-8012

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot controller component. A remote attacker can execute arbitrary code...

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

Buffer overflow

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot controller component. A remote attacker can execute arbitrary code...

CVE-2020-8010 Nimbus protocol allows unauth read/write/execute

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...