Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoUnified Communications Manager*

47 matches found

CVE
CVE•added 2021/12/10 10:15 a.m.•5932 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message ...

10CVSS10AI score0.9447EPSS
In wildWeb
CVE
CVE•added 2024/01/26 6:15 p.m.•120 views

CVE-2024-20253

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory. ...

10CVSS9.6AI score0.03027EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•93 views

CVE-2021-1380

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00346EPSS
CVE
CVE•added 2023/01/20 7:15 a.m.•92 views

CVE-2023-20010

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This ...

8.8CVSS8.7AI score0.00211EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•82 views

CVE-2021-1408

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00339EPSS
CVE
CVE•added 2020/09/23 1:15 a.m.•75 views

CVE-2020-3135

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. The vulnerability is due to insufficient CSRF protections for the web-base...

8.8CVSS7.9AI score0.00159EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•75 views

CVE-2021-1409

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00346EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•67 views

CVE-2021-1407

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00339EPSS
CVE
CVE•added 2021/01/20 8:15 p.m.•63 views

CVE-2021-1282

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisc...

6.5CVSS6.3AI score0.00309EPSS
CVE
CVE•added 2009/08/27 5:0 p.m.•59 views

CVE-2009-2050

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466.

7.8CVSS6.7AI score0.01875EPSS
CVE
CVE•added 2014/07/10 11:6 a.m.•59 views

CVE-2014-3316

The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297.

4CVSS6.3AI score0.00511EPSS
CVE
CVE•added 2021/01/20 8:15 p.m.•58 views

CVE-2021-1355

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisc...

6.5CVSS6.9AI score0.004EPSS
CVE
CVE•added 2022/07/06 9:15 p.m.•57 views

CVE-2022-20862

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of...

4.3CVSS4.6AI score0.00051EPSS
CVE
CVE•added 2013/10/11 3:54 a.m.•54 views

CVE-2013-5528

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

4CVSS6.4AI score0.61502EPSS
Web
CVE
CVE•added 2021/05/06 1:15 p.m.•52 views

CVE-2021-1478

A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on a...

6.8CVSS5.5AI score0.00239EPSS
CVE
CVE•added 2021/01/20 8:15 p.m.•50 views

CVE-2021-1364

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisc...

6.5CVSS6.3AI score0.00309EPSS
CVE
CVE•added 2014/02/13 5:24 a.m.•49 views

CVE-2014-0723

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343.

4.3CVSS5.8AI score0.00285EPSS
CVE
CVE•added 2024/11/18 4:15 p.m.•49 views

CVE-2020-3420

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user...

5.4CVSS5.3AI score0.00055EPSS
CVE
CVE•added 2021/01/20 8:15 p.m.•47 views

CVE-2021-1357

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisc...

6.5CVSS6.9AI score0.0036EPSS
CVE
CVE•added 2014/02/13 5:24 a.m.•46 views

CVE-2014-0727

SQL injection vulnerability in the CallManager Interactive Voice Response (CMIVR) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05318.

7.5CVSS8.5AI score0.00397EPSS
CVE
CVE•added 2014/04/29 10:37 a.m.•44 views

CVE-2014-2184

The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352.

5CVSS6.2AI score0.0025EPSS
CVE
CVE•added 2014/10/31 10:55 a.m.•44 views

CVE-2014-3372

Multiple cross-site scripting (XSS) vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589.

4.3CVSS5.9AI score0.00442EPSS
CVE
CVE•added 2018/03/27 9:29 a.m.•44 views

CVE-2018-0198

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. A ...

5.3CVSS5.2AI score0.0072EPSS
CVE
CVE•added 2013/05/16 3:36 a.m.•43 views

CVE-2013-1188

Cisco Unified Communications Manager (CUCM) does not properly limit the rate of authentication attempts, which allows remote attackers to cause a denial of service (application slowdown) via a series of requests, aka Bug ID CSCud39515.

5CVSS7AI score0.00661EPSS
CVE
CVE•added 2018/01/18 6:29 a.m.•43 views

CVE-2018-0105

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. An...

5.3CVSS5.2AI score0.0072EPSS
CVE
CVE•added 2021/11/04 4:15 p.m.•43 views

CVE-2021-34701

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection coul...

4.3CVSS4.4AI score0.0009EPSS
CVE
CVE•added 2013/05/04 3:24 a.m.•42 views

CVE-2013-1240

The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770.

4.6CVSS6.5AI score0.00061EPSS
CVE
CVE•added 2013/08/29 12:7 p.m.•41 views

CVE-2013-3472

Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210.

6.8CVSS7.4AI score0.00107EPSS
CVE
CVE•added 2014/02/13 5:24 a.m.•41 views

CVE-2014-0725

Cisco Unified Communications Manager (UCM) does not require authentication for reading WAR files, which allows remote attackers to obtain sensitive information via unspecified access to a "file storage location," aka Bug ID CSCum05337.

5CVSS6.6AI score0.00275EPSS
CVE
CVE•added 2014/10/31 10:55 a.m.•41 views

CVE-2014-3374

Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90582.

4.3CVSS5.9AI score0.00499EPSS
CVE
CVE•added 2013/12/12 5:55 p.m.•40 views

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly d...

7.3CVSS6.4AI score0.13184EPSS
CVE
CVE•added 2014/07/10 11:6 a.m.•40 views

CVE-2014-3318

Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.

4CVSS6.3AI score0.00684EPSS
CVE
CVE•added 2013/06/26 9:55 p.m.•39 views

CVE-2013-3397

Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298.

6.8CVSS7.5AI score0.00116EPSS
CVE
CVE•added 2013/11/01 2:55 a.m.•38 views

CVE-2013-5555

Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a crafted SIP message, aka Bug ID CSCub54349.

4.3CVSS6.8AI score0.00443EPSS
CVE
CVE•added 2014/02/13 5:24 a.m.•38 views

CVE-2014-0722

The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradation) via unspecified use of this application, aka Bug ID CSCum05347.

5CVSS6.8AI score0.00737EPSS
CVE
CVE•added 2014/04/29 10:37 a.m.•38 views

CVE-2014-2185

The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374.

4CVSS5.8AI score0.00176EPSS
CVE
CVE•added 2013/08/05 1:22 p.m.•37 views

CVE-2013-3451

Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033.

6.8CVSS7.5AI score0.00116EPSS
CVE
CVE•added 2014/10/31 10:55 a.m.•37 views

CVE-2014-3366

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted response, aka Bug ID CSCup88089.

6.5CVSS8.1AI score0.00279EPSS
CVE
CVE•added 2014/10/31 10:55 a.m.•37 views

CVE-2014-3373

Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550.

4.3CVSS5.9AI score0.00499EPSS
CVE
CVE•added 2015/01/22 2:1 p.m.•37 views

CVE-2014-8008

Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.

6.8CVSS6.4AI score0.0832EPSS
CVE
CVE•added 2013/08/05 1:22 p.m.•36 views

CVE-2013-3442

The web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854.

4CVSS5.9AI score0.00162EPSS
CVE
CVE•added 2014/02/13 5:24 a.m.•36 views

CVE-2014-0729

SQL injection vulnerability in the Enterprise Mobility Application (EMApp) interface in Cisco Unified Communications Manager (UCM) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302.

7.5CVSS8.5AI score0.00413EPSS
CVE
CVE•added 2014/06/10 11:19 a.m.•35 views

CVE-2014-3287

SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.

4CVSS8.2AI score0.00242EPSS
CVE
CVE•added 2014/06/10 11:19 a.m.•35 views

CVE-2014-3292

The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.

5.5CVSS6.4AI score0.00959EPSS
CVE
CVE•added 2014/10/31 10:55 a.m.•35 views

CVE-2014-3375

Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597.

4.3CVSS5.9AI score0.00532EPSS
CVE
CVE•added 2014/07/10 11:6 a.m.•33 views

CVE-2014-3315

Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.

4.3CVSS5.9AI score0.00357EPSS
CVE
CVE•added 2013/08/05 1:22 p.m.•32 views

CVE-2013-3450

Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028.

6.8CVSS7.4AI score0.00122EPSS