Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

Cisco Unified Communications Domain Manager is an enterprise-class IP telephony call-processing system from the American company Cisco Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Domain Manager versions prior to 10.6. It allows a remote attacker to...

CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

CVE-2015-6352

Cisco Unified Communications Domain Manager (UCD) before version 10.6(1) is affected by an information-disclosure vulnerability where error messages for pathname access differ depending on whether the path exists. This enables remote attackers to map the filesystem by issuing a sequence of reques...

CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

PT-2015-7196

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager versions prior to 10.61 Description The issue allows remote attackers to map a filesystem by providing different error messages for pathname access attempts, depending on whether the pathname exists...

CVE-2015-6352: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

Cisco Unified Communications Domain Manager URI Enumeration Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to map a file system structure. The vulnerability is due to different handling of existent and nonexistent paths. An attacker could exploit this vulnerability by enumerating all possible...

[USN-2769-1] Apache Commons HttpClient

========================================================================== Ubuntu Security Notice USN-2769-1 October 14, 2015 commons-httpclient vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

Unspecified Vulnerability in Oracle Communications Applications (CNVD-2015-06825)

Oracle Communications Applications is the United States Oracle Oracle company's set of communications middleware. An unspecified vulnerability exists in Oracle Communications Applications 10.2.0 and earlier versions. The vulnerability allows remote attackers to compromise confidentiality,...

Unspecified Vulnerability in Oracle Communications Applications (CNVD-2015-06908)

Oracle Communications Applications is a communications application solution developed by Oralce. An unspecified vulnerability exists in Oracle Communications Applications 2.0,3.0.1, which allows remote attackers to compromise confidentiality via unknown vectors with related mail proxy servers...

CVE-2015-4793

Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy...

CVE-2015-2608

Unspecified vulnerability in 1 the Oracle Communications Diameter Signaling Router DSR component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; 2 the Oracle Communications Performance Intelligence Center Software component in...

Design/Logic Flaw

Unspecified vulnerability in 1 the Oracle Communications Diameter Signaling Router DSR component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; 2 the Oracle Communications Performance Intelligence Center Software component in...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy...

CVE-2015-2608

Unspecified vulnerability in 1 the Oracle Communications Diameter Signaling Router DSR component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; 2 the Oracle Communications Performance Intelligence Center Software component in...

CVE-2015-4793

Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy...

CVE-2015-2608

CVE-2015-2608 concerns an unspecified vulnerability in Oracle Communications Applications components (DSR, Performance Intelligence Center, Policy Management, Tekelec HLR Router) where PMAC-related vectors may affect confidentiality, integrity, and availability. Affected versions span multiple re...

CVE-2015-4793

CVE-2015-4793 concerns Oracle Communications Convergence in Oracle Communications Applications 2.0 and 3.0.1. The vulnerability is described as unspecified and remote-exploitable, potentially affecting confidentiality via unknown vectors related to the Mail Proxy. The NVD record assigns a CVSSv2 ...

CVE-2015-4793: Undefined Security Weakness

Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors related to Mail Proxy...

CVE-2015-2608: Undefined Security Weakness

Unspecified vulnerability in 1 the Oracle Communications Diameter Signaling Router DSR component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and 7.1.0 and earlier; 2 the Oracle Communications Performance Intelligence Center Software component in...