Lucene search

K
CiscoUnified Communications Domain Manager-

6 matches found

CVE
CVE
added 2014/07/07 11:1 a.m.47 views

CVE-2014-2197

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CS...

9CVSS6.3AI score0.00775EPSS
CVE
CVE
added 2014/07/07 11:1 a.m.47 views

CVE-2014-3300

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.

7.5CVSS6.5AI score0.45577EPSS
CVE
CVE
added 2014/07/07 11:1 a.m.41 views

CVE-2014-2198

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation o...

10CVSS6.8AI score0.02337EPSS
CVE
CVE
added 2014/08/12 11:55 p.m.40 views

CVE-2014-3339

Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote authenticated users to execute arbitrary SQL commands via crafted input to unspecified pages, aka Bug ID CSCup74290.

6.5CVSS8.3AI score0.00378EPSS
CVE
CVE
added 2014/06/08 4:55 p.m.38 views

CVE-2014-3278

The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun39619 and CSCun45572.

5CVSS6.9AI score0.0026EPSS
CVE
CVE
added 2014/06/08 4:55 p.m.32 views

CVE-2014-3281

The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101.

5CVSS6.5AI score0.0026EPSS