CVE-2016-9206

A vulnerability in the ccmadmin page of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvb64641. Known Affected Releases: 11.51.10000.6 11.51.11007.2. Known Fixed Releases:...

CVE-2016-6464

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

Cross site scripting

A vulnerability in the ccmadmin page of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvb64641. Known Affected Releases: 11.51.10000.6 11.51.11007.2. Known Fixed Releases:...

Design/Logic Flaw

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

Code injection

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...

CVE-2016-9206

A vulnerability in the ccmadmin page of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. More Information: CSCvb64641. Known Affected Releases: 11.51.10000.6 11.51.11007.2. Known Fixed Releases:...

CVE-2016-6464

CVE-2016-6464 affects Cisco Unified Communications Manager IM and Presence Service web management interface. An unauthenticated, remote attacker could view restricted web pages due to lack of proper HTTP header input validation. Affects at least 11.5(1); fixed in 11.5(1.12000.2) and 12.0(0.98000....

CVE-2016-6464

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

CVE-2016-9210

CVE-2016-9210 affects Cisco Unified Communications Manager’s Unified Reporting Upload Tool . The vulnerability is a directory traversal flaw that allows an unauthenticated, remote attacker to plant/modify arbitrary files on the affected system by submitting a crafted POST request via the CUCM Uni...

CVE-2016-9206

CVE-2016-9206 affects Cisco Unified Communications Manager (CUCM) through a vulnerability in the ccmadmin page that can allow an unauthenticated, remote attacker to perform reflected cross-site scripting (XSS). The issue arises from improper sanitization/encoding of user-supplied data on the ccma...

CVE-2016-9210

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...

Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability (CNVD-2016-12548)

Cisco Unified Communications Manager IM and Presence Service is a Cisco Unified Communications Manager Instant Messaging business service. A security vulnerability in the Cisco Unified Communications Manager IM and Presence Service WEB management interface allows remote attackers to exploit the...

CA Unified Management Portal (UMP) Detection

Binary data caumpdetect.nbin...

CA Unified Infrastructure Management < 8.4 SP2 Multiple Information Disclosure Vulnerabilities (CA20161109-01)

According to its self-reported version number from the CA Unified Management Portal UMP, the CA Unified Infrastructure Management UIM application running on the remote host is prior to 8.4 SP2. It is, therefore, affected by multiple information disclosure vulnerabilities : - An information...

Cisco Unified Communications Manager 7 / 8 / 9 Directory Traversal

Exploit Title: Cisco Unified Communications Manager Administrative Web Interface Directory traversal CVE-2013-5528 Date: 7th December 2016 Exploit Author: justpentest Vendor Homepage: https://software.cisco.com/ Software Link: https://software.cisco.com/download/navigator.html?mdfid=268439621...

Cisco Unified Communications Manager Unified Reporting Upload Tool Directory Traversal Vulnerability (cisco-sa-20161207-cur)

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco Unified Communications Manager Administration Page Cross-Site Scripting Vulnerability (cisco-sa-20161207-cucm)

A vulnerability in the ccmadmin page of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting XSS attacks. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

Cisco Unified Communications Manager Unified Reporting Upload Tool Directory Traversal Vulnerability

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. The vulnerability is due to insufficient client-side validation checks. An attacker could...

Cisco Unified Communications Manager IM and Presence Service Information Disclosure Vulnerability

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. The vulnerability is due to a lack of proper input validation performed o...