The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to gain root user privileges.

The vulnerability of the Prime Collaboration Deployment component of the Cisco Unified Communications Manager system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root user privileges through a direc...

The vulnerability of the Cisco Unified Communications Manager system allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted parameter...

Cisco Unified Communications Manager - Multiple Vulnerabilities

Vantage Point Security Advisory 2015-001 ======================================== Title: Cisco Unified Communications Manager Multiple Vulnerabilities Vendor: Cisco Vendor URL: http://www.cisco.com/ Versions affected: Summary: -------- Cisco Unified Communications Manager CUCM offers services suc...

The vulnerability of the Cisco Unified Communications Manager system allows a intruder to trigger a service failure.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending multiple requests...

Cisco Unified Communications Manager IM and Presence GNU C Library (glibc) Buffer Overflow (CSCus69785) (GHOST)

According to its self-reported version, the Cisco Unified Communications Manager IM and Presence Server Service is affected by a heap-based buffer overflow condition in the GNU C Library glibc due to improper validation of user-supplied input to the glibc functions nsshostnamedigitsdots,...

Cisco 11.0.1 Unified Communications Manager Command Execution Vulnerability

Cisco Unified Communications Manager versions prior to 11.0.1, 10.5.2, and 9.2 suffer from multiple command execution vulnerabilities. Title: Cisco Unified Communications Manager Multiple Vulnerabilities Vendor: Cisco Vendor URL: http://www.cisco.com/ Versions affected: Summary: -------- Cisco...

Cisco Unified Communications Manager Command Execution

Vantage Point Security Advisory 2015-001 ======================================== Title: Cisco Unified Communications Manager Multiple Vulnerabilities Vendor: Cisco Vendor URL: http://www.cisco.com/ Versions affected: Summary: -------- Cisco Unified Communications Manager CUCM offers services suc...

[SECURITY] Fedora 21 Update: openssh-6.6.1p1-15.fc21

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2015-05103)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Manager 10.5 3.10000.9 has a security vulnerability in the implementation of the Prime Collaboration Deployment component, which can be exploited by an authenticated remot...

CVE-2015-4295

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

CVE-2015-4295

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

CVE-2015-4295

Cisco Unified Communications Manager 10.5(3.10000.9) Prime Collaboration Deployment contains an Information Disclosure vulnerability. An authenticated remote attacker can view root credentials via a direct request to an unspecified URL due to insufficient protections of data at rest, potentially ...

CVE-2015-4295: Exposure of Sensitive Information to an Unauthorized Actor

The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.53.10000.9 allows remote authenticated users to discover root credentials via a direct request to an unspecified URL, aka Bug ID CSCuv21819...

[SECURITY] Fedora 22 Update: openssh-6.9p1-4.fc22

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

PT-2015-1637

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.53.10000.9 Description The issue is related to the Prime Collaboration Deployment component, which lacks protection of internal data. This allows a remote authenticated user to discover root...

Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability

A vulnerability in the Prime Collaboration Deployment of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protections of data at rest. An attacker could exploit this vulnerability by browsing to a...

[SECURITY] Fedora 22 Update: openssh-6.9p1-3.fc22

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2015-04698)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A security vulnerability exists in Cisco Unified Communications Manager that allows authenticated users to submit AVVID XML LAYER session requests at a special high rate, making the target...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager (CNVD-2015-04702)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can ...

CVE-2015-4272

Multiple cross-site scripting XSS vulnerabilities in the ccmivr page in Cisco Unified Communications Manager formerly CallManager 10.52.10000.5 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580...