CVE-2021-1362

CVE-2021-1362 affects Cisco Unified Communications Manager family (CUCM, IM&P, Session Management Edition, Unity Connection, Prime License Manager). The vulnerability is due to improper sanitization of user-supplied input in the SOAP API endpoint, allowing an authenticated, remote attacker to sen...

CVE-2021-1226

The CVE-2021-1226 issue affects Cisco UCM family (including Cisco Unified Communications Manager, Session Management Edition, IM&P Service, Unity Connection, Emergency Responder, and Prime License Manager). It arises from storing certain credentials in clear text within audit logs, enabling an au...

CVE-2017-6779

CVE-2017-6779 affects multiple Cisco VOS-based products (Emergency Responder, Finesse, UCM family, Unity Connection, UIC, SME, UCCx, MediaSense, Prime products, and related). Root cause: system log file has no maximum size limit, enabling an unauthenticated, remote attacker to cause high disk uti...

CVE-2017-12337

CVE-2017-12337 affects Cisco Voice Operating System (Voice OS) upgrade mechanisms. A refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration can leave an engineering flag enabled after completion, potentially allowing an unauthenticated attacker to gain root access with a known pas...

CVE-2020-3140

Cisco Prime License Manager (PLM) suffers a privilege-escalation vulnerability in its web management interface due to insufficient validation of user input. An unauthenticated, remote attacker could submit a crafted request and gain administrative privileges, given a valid username. Impact is hig...

CVE-2018-15441

Cisco Prime License Manager (PLM) is affected by CVE-2018-15441, a SQL injection in the web framework code that could allow an unauthenticated, remote attacker to execute arbitrary SQL. The issue arises from inadequate validation of user-supplied input in SQL queries, exploitable via crafted HTTP...