6186 matches found
CVE-2015-4269
Cisco Unified Communications Manager 10.5(1.99995.9) contains a DoS vulnerability in the Tomcat throttling feature. An authenticated, remote attacker can trigger the issue by sending a high rate of requests, causing the management page to become slow or unresponsive. The Cisco advisory notes that...
Cisco Unified Computing System C Integrated Management Controller Security Bypass Vulnerability
Cisco Unified Computing System UCS C server is a Unified Computing System UCS C-series server from Cisco USA.Integrated Management Controller IMC is a set of management tools used in which it supports HTTP, SSH access, and so on, and can perform operations such as powering on, powering off, and...
Cisco Unified MeetingPlace Unspecified SQLi (CSCuu54037)
According to its self-reported version number, the Cisco Unified MeetingPlace application hosted on the remote web server is potentially affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input. An authenticated, remote attacker can exploit this to...
Cisco Unified MeetingPlace Web Page Source Code Remote Password Disclosure (CSCuu33050)
According to its self-reported version number, the Cisco Unified MeetingPlace application hosted on the remote web server is potentially affected by an information disclosure vulnerability due to improper handling of passwords. An authenticated, remote attacker can obtain plaintext passwords by...
Cisco Unified Communications Manager Denial of Service Vulnerability
A vulnerability in the Tomcat service throttling mechanism of the Cisco Unified Communications Manager could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to sending multiple authenticated requests to Cisco Unified Communications...
Cisco Unified Communications Manager ccmivr Page Cross-Site Scripting Vulnerability
A vulnerability in several parameters of the ccmivr page of Cisco Unified Communications Manager, formerly known as CallManager, could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on an affected system. The vulnerabilit...
CVE-2015-4259
Cisco UCS C-Series Servers IMC exposes a default SSL certificate, enabling MITM attacks by an attacker with knowledge of the private key. Affected product: Integrated Management Controller on UCS C servers running 1.5(3) or 1.6(0.16). Root cause: use of a default certificate that bypasses cryptog...
Cisco Unified CDM platform exposure of privileged accounts and static passwords-vulnerability warning-the black bar safety net
! Cisco's Unified CDM communications domain Manager was revealed to contain a default that cannot be modified privileged accounts and the use of static password, the attacker can use the platform to remote attacks and intrusions. Vulnerability Cisco's Unified CDM is a Cisco hosted collaboration...
Cisco Unified Computing System C-Series Servers Man-in-the-Middle Vulnerability
A vulnerability in the Cisco Integrated Management Controller of the Cisco Unified Computing System UCS C-Series Servers could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the affected device. The vulnerability is due to improper validation of the SSL...
Hardcoded credentials
Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...
CVE-2015-4196
Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...
CVE-2015-4196
CVE-2015-4196 affects Cisco Unified Communications Domain Manager (CDM) Platform Software before 4.4.5 (CDM 8.x). The root cause is a hardcoded privileged account password that allows an unauthenticated, remote attacker to obtain root access by SSHing with that credential. Impact stated as full c...
Cisco Unified Communications Domain Manager Default Static Privileged Account Vulnerability
Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. The Cisco Unified Communications Domain Manager Platform has a privileged account with a default static password, which can be exploited by an unauthenticated, remote attacker to log in with root user...
CVE-2015-4233
SQL injection vulnerability in Cisco Unified MeetingPlace 8.61.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037...
CVE-2015-4233
Cisco Unified MeetingPlace 8.6(1.2) is affected by CVE-2015-4233: an authenticated remote attacker can exploit a SQL injection by sending crafted SQL statements due to improper input sanitization, potentially reading/modifying/deleting database data. The root cause is failure to properly validate...
CVE-2015-4233
SQL injection vulnerability in Cisco Unified MeetingPlace 8.61.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037...
Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials
A vulnerability in the Cisco Unified Communications Domain Manager Platform Software could allow an unauthenticated, remote attacker to login with the privileges of the root user and take full control of the affected system. The vulnerability occurs because a privileged account has a default and...
Cisco Releases Security Update
Cisco has released a security update to address a vulnerability in versions of the Unified Communications Domain Manager Platform Software prior to 10.x. Exploitation of this vulnerability may allow a remote attacker to take control of the affected system. US-CERT recommends that users review the...
Cisco Unified MeetingPlace SQL Injection Vulnerability
A vulnerability in Cisco Unified MeetingPlace could allow an authenticated, remote attacker to impact the confidentiality, integrity, and availability of the affected system by executing arbitrary SQL queries. The vulnerability is due to failure to validate user-supplied input used in SQL queries...