Design/Logic Flaw

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-1643

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

Code injection

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

Code injection

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

CVE-2011-2561

Cisco Unified Communications Manager (CUCM) 7.x prior to 7.1(5b)su4 and 8.x prior to 8.0(1) is vulnerable in its SIP processing when handling SDP data during SIP calls using the g729ar8 codec for a Media Termination Point (MTP). The flaw, tracked as Bug CSCtc61990, can allow remote attackers to c...

CVE-2011-2563

CVE-2011-2563 describes a DoS vulnerability in Cisco’s Service Advertisement Framework (SAF) affecting Cisco Unified Communications Manager (CUCM, 8.x before 8.5(1)) and Cisco Intercompany Media Engine (IME, 8.x before 8.5(1). An unauthenticated remote attacker can send crafted SAF packets, causi...

CVE-2011-2560

The Packet Capture Service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service memory consumption and restart by making many connections, aka Bug ID CSCtf97162...

CVE-2011-2562

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu3, 8.x before 8.03asu1, and 8.5 before 8.51 allows remote attackers to cause a denial of service service outage via a SIP INVITE message, aka Bug ID CSCth43256...

CVE-2011-1643

CVE-2011-1643 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence Server. Affected CUCM versions: 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2; Presence Server: 6.x, 7.x, 8.0, and 8.5 before 8.5xnr. Root cause: an open query interface could disclose databas...

CVE-2011-2564

CVE-2011-2564 affects Cisco Unified Communications Manager (CUCM) 8.x before 8.5(1) and Cisco Intercompany Media Engine (IME) 8.x before 8.5(1). The vulnerability allows an unauthenticated attacker to cause a denial of service (device reload) by sending crafted Service Advertisement Framework (SA...

CVE-2011-1643

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

Cisco Releases Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting the Cisco Unified Communications Manager, the Cisco Unified Presence Server, and the Cisco Intercompany Media Engine. These vulnerabilities may allow an attacker to disclose sensitive information or cause a...

DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

Cisco Common Services Devices Center Cross Site Scripting (CVE-2011-0962)

A cross-site scripting vulnerability has been reported within Cisco's Common Services Device Center, a component of Cisco Unified Operations Manager. Remote attackers can trigger this flaw by enticing a user to follow a malicious URL containing a crafted parameter. Successful exploitation of this...

Cisco Unified Operations Manager 8.5 - iptmddv.do?deviceInstanceName Cross-Site Scripting

Cisco Unified Operations Manager 8.5 - iptmddv.do?deviceInstanceName Cross-Site Scripting source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

Cisco Unified Operations Manager 8.5 - iptmfaultmonuidojoMaineventmon_wrapper.jsp Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmfaultmonuidojoMaineventmonwrapper.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to proper...

Cisco Unified Operations Manager 8.5 - iptm/eventmon Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-suppli...

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...