Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2018-02045)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information disclosure...

CVE-2018-0105

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. ...

Design/Logic Flaw

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. ...

CVE-2018-0105

The CVE-2018-0105 entry describes an information-disclosure flaw in the web framework of Cisco Unified Communications Manager (CUCM). The root cause is insufficient protection of database tables, allowing an unauthenticated, remote attacker to view data by visiting a specific URL. Affected compon...

CVE-2018-0105

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. ...

CVE-2018-0105

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. ...

CVE-2018-2567

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2018-2571

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2018-2571

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2570

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2567

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2018-2570

CVE-2018-2570 affects Oracle Communications Unified Inventory Management (Portal subcomponent). Affects versions 7.2.4.2.x and 7.3. An attacker with network access via HTTP and low privileges can read, update, insert, or delete data and cause partial denial of service, per the NVD CNVD/CVE record...

CVE-2018-2567

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2018-2570

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2567

CVE-2018-2567 affects Oracle Communications Order and Service Management (Portal subcomponent). The vulnerability exists in supported versions 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. According to the sources, an unauthenticated attacker with network access via HTTP can compromise the syste...

CVE-2018-2571

Vulnerability in the Oracle Communications Unified Inventory Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.2.x and 7.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2571

CVE-2018-2571 affects Oracle Communications Unified Inventory Management (Portal subcomponent) within Oracle Communications Applications. The vulnerability exists in versions 7.2.4.2.x and 7.3 and permits a low-privileged attacker with network access over HTTP to perform unauthorized read, and to...