CVE-2021-1478

CVE-2021-1478 affects Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). The issue arises from an unsecured JMX TCP/IP port, permitting an authenticated, remote attacker over the network to restart the JMX process and cause a denial-of-se...

CVE-2020-3124

Cisco HCM-F CSRF vulnerability (CVE-2020-3124) stems from insufficient CSRF protections in the web-based interface. An unauthenticated, remote attacker can persuade a user to click a malicious link, enabling arbitrary requests that could change a target user’s password and allow unauthorized acti...

CVE-2020-3256

Cisco HCM-F (Hosted Collaboration Mediation Fulfillment) web-based management interface is affected by an XXE (XML External Entity) vulnerability. The issue arises during parsing of certain XML files, allowing an authenticated, remote attacker with administrative privileges to read local files an...