Lucene search
+L

95 matches found

Cisco
Cisco
•added 2023/06/07 4:00 p.m.•87 views

Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to cause a temporary service outage for all Cisco Unified CM IM&P users who are attempting to authenticate to the...

7.5CVSS7.8AI score0.00933EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/06/07 4:00 p.m.•6 views

CVE-2023-20108

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to cause a temporary service outage for all Cisco Unified CM IM&P users who are attempting to authenticate to the...

7.5CVSS7.2AI score0.00933EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/11/06 6:15 p.m.•35 views

CVE-2020-27121 Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

4.3CVSS6.5AI score0.01164EPSS
SaveExploits0References1
NCSC
NCSC
•added 2020/11/05 12:00 a.m.•20 views

Vulnerabilities fixed in Cisco Unified Communications Manager

Due to a vulnerability in Cisco Unified Communications Manager -software, an authenticated remote malicious party could cause the Cisco XCP Authentication Service on an affected device to be restarted, resulting in a Denial-of-Service DoS. Cisco has released an update to fix the vulnerability. Mo...

6.5CVSS6.6AI score0.01164EPSS
SaveExploits0
attackerkb
attackerkb
•added 2020/11/04 4:00 p.m.•7 views

CVE-2020-27121

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

6.5CVSS5.6AI score0.01164EPSS
SaveExploits0References2
Cisco
Cisco
•added 2020/11/04 4:00 p.m.•61 views

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...

4.3CVSS5.5AI score0.01164EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2018/09/14 12:00 a.m.•14 views

The vulnerability of the XCP Router service in Cisco Unified Communications Manager IM and Presence Service, as well as the Cisco TelePresence Video Communication Server, allows a perpetrator to induce a service failure.

The vulnerability of the XCP Router service in Cisco Unified Communications Manager IM and Presence Service, as well as the Cisco TelePresence Video Communication Server, stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failure...

7.8CVSS5.5AI score0.03491EPSS
SaveExploits0References4
CNVD
CNVD
•added 2018/08/16 12:00 a.m.•10 views

Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM is a call processing component of a unified communications system from Cisco.Cisco Unified Communications Manager IM and Presence Cisco Unified Communications Manager IM and Presence Service is a CUCM-based instant messaging IM and status...

7.5CVSS7.3AI score0.03491EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2018/08/15 8:00 p.m.•15 views

CVE-2018-0409

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

7.1AI score0.03491EPSS
SaveExploits0References5
CVE
CVE
•added 2018/08/15 8:00 p.m.•99 views

CVE-2018-0409

CVE-2018-0409 affects the XCP Router in Cisco CUCM IM&P and in Cisco TelePresence VCS/Expressway. The issue arises from improper validation of user-supplied input, allowing an unauthenticated remote attacker to send crafted IPv4/IPv6 packets to TCP port 7400, overreading a buffer and causing the ...

7.5CVSS7.6AI score0.03491EPSS
SaveExploits0References5Affected Software1
Cisco
Cisco
•added 2018/08/15 4:00 p.m.•74 views

Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

7.5CVSS1.8AI score0.03491EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/15 12:00 a.m.•2 views

CVE-2018-0409: Improper Input Validation

A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...

7.5CVSS7.2AI score0.03491EPSS
SaveExploits0References3
NVD
NVD
•added 2016/03/09 11:59 p.m.•25 views

CVE-2016-0886

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

4.3CVSS4.3AI score0.01758EPSS
SaveExploits0References3
Prion
Prion
•added 2016/03/09 11:59 p.m.•22 views

Code injection

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

4CVSS6.5AI score0.01758EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2016/03/09 11:00 p.m.•53 views

CVE-2016-0886

CVE-2016-0886 affects EMC Documentum xCP (versions 2.1 before patch 24 and 2.2 before patch 12). The vulnerability allows remote authenticated users to disclose sensitive user-account metadata via the members/xcp_member API. Root cause is an information-disclosure issue in that API endpoint. Impa...

4.3CVSS4.3AI score0.01758EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2016/03/09 11:00 p.m.•34 views

CVE-2016-0886

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

4.3AI score0.01758EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/09 12:00 a.m.•4 views

CVE-2016-0886: Exposure of Sensitive Information to an Unauthorized Actor

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

4.3CVSS5.5AI score0.01758EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/03/09 12:00 a.m.•16 views

EMC Documentum xCP Information Disclosure Vulnerability

EMC Documentum xCP is a development platform from EMC that uses automated information-intensive processes to help users make business decisions. The platform provides real-time visibility, content analytics and business insights. A security vulnerability exists in the members/xcpmember API in EMC...

4.3CVSS6.8AI score0.01758EPSS
SaveExploits0References1
NVD
NVD
•added 2016/02/12 1:59 a.m.•21 views

CVE-2016-0882

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

5.5CVSS5.3AI score0.01707EPSS
SaveExploits0References2
OSV
OSV
•added 2016/02/12 1:59 a.m.•13 views

CVE-2016-0882

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

5.4CVSS5.8AI score0.01707EPSS
SaveExploits0References2
Rows per page
Query Builder