7009 matches found
Cisco Unified Communications Manager CAPF SQL注入漏洞
Bugtraq ID:65645 CVE ID:CVE-2014-0734 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager证书授权代理功能Certificate Authority Proxy Function不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交特制的SQL查询，可操作或获取数据库数据。 0 Cisco Unified Communications Manager 10.01.10000.3 厂商补丁： Cisco ---...
CVE-2014-0733
The Enterprise License Manager ELM component in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494...
Authentication flaw
The Enterprise License Manager ELM component in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494...
CVE-2014-0733
The vulnerability CVE-2014-0733 affects Cisco Unified Communications Manager’s Enterprise License Manager (ELM). The ELM component in Unified CM 10.0(1) and earlier does not properly enforce authentication, allowing remote attackers to read ELM files by directly requesting a URL. The issue is an ...
CVE-2014-0733
The Enterprise License Manager ELM component in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494...
CVE-2014-0734
SQL injection vulnerability in the Certificate Authority Proxy Function CAPF implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483...
CVE-2014-0732
The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...
CVE-2014-0736
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR page in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug I...
CVE-2014-0735
Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470...
Cross site scripting
Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR page in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug I...
Authentication flaw
The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...
Sql injection
SQL injection vulnerability in the Certificate Authority Proxy Function CAPF implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483...
CVE-2014-0734
SQL injection vulnerability in the Certificate Authority Proxy Function CAPF implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483...
CVE-2014-0732
The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...
CVE-2014-0735
Cisco Unified Communications Manager IPMA (IPMA interface) is affected by CVE-2014-0735 (Bug CSCum46470): an XSS via crafted URLs due to insufficient input validation in the IP Manager Assistant. Affected product: Cisco Unified CM IPMA, version 10.0(1) and earlier. Impact per sources: remote atta...
CVE-2014-0736
Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR page in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug I...
CVE-2014-0732
The CVE-2014-0732 issue affects Cisco Unified Communications Manager (Cisco Unified CM) RTMT web application (versions 10.0(1) and earlier). The root cause is insufficient authentication enforcement, permitting unauthenticated remote attackers to read RTMT files via a direct URL. Impact is inform...
CVE-2014-0735
Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470...
CVE-2014-0736
Cisco Unified Communications Manager (Unified CM) is affected by CSRF on the CAR page, for 10.0(1) and earlier. An attacker can trick a logged-in user into issuing CAR-modification requests, potentially hijacking the user’s authentication for those actions. The issue is addressed in Cisco’s advis...