CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

CVE-2011-1605

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

CVE-2011-1609

SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...

Memory corruption

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

CVE-2011-1607

Directory traversal vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu1, and 8.5 before 8.51 allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an uploa...

CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

Sql injection

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...

Directory traversal

Directory traversal vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu1, and 8.5 before 8.51 allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an uploa...

CVE-2011-1610

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

CVE-2011-1605

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu2, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCth39586...

CVE-2011-1607

Directory traversal vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu1, and 8.5 before 8.51 allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an uploa...

CVE-2011-1609

Cisco Unified Communications Manager (CUCM) is affected by SQL injection vulnerabilities (CVE-2011-1609) in 6.x prior to 6.1(5)su2, 7.x prior to 7.1(5)su1, 8.0 prior to 8.0(3), and 8.5 prior to 8.5(1). The flaw allows a remote authenticated user to execute arbitrary SQL commands via unspecified v...

CVE-2011-1604

The CVE-2011-1604 issue affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, 8.0, and 8.5, where a memory leak triggered by malformed SIP messages can cause DoS (memory consumption and process failure). Cisco’s advisory fixes this in CUCM versions 6.1(5)SU3, 7.1(5b)SU3, 8.0(3a)SU2, and 8...

CVE-2011-1605

CVE-2011-1605 affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, and 8.x. The vulnerability arises from processing malformed SIP messages in the SIP services, leading to a denial of service (process failure). Cisco’s advisory lists fixes in CUCM versions 6.1(5)SU2/3, 7.1(5b)SU2, 8.0(3)...

CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

CVE-2011-1609

SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...

CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...