Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoUnified Communications Manager10.5(2.10000.5)

7 matches found

CVE
CVE•added 2017/05/22 1:29 a.m.•66 views

CVE-2017-6654

A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerabilit...

6.1CVSS5.9AI score0.00143EPSS
CVE
CVE•added 2017/04/20 10:59 p.m.•58 views

CVE-2017-3808

A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rat...

7.8CVSS7.5AI score0.00541EPSS
CVE
CVE•added 2017/08/17 8:29 p.m.•51 views

CVE-2017-6785

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of proper...

4.3CVSS4.9AI score0.00171EPSS
CVE
CVE•added 2017/08/07 6:29 a.m.•49 views

CVE-2017-6757

A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass...

8.8CVSS8.9AI score0.00679EPSS
CVE
CVE•added 2017/09/07 9:29 p.m.•46 views

CVE-2017-6791

A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer Security (TLS) traffic...

7.5CVSS7.6AI score0.0179EPSS
CVE
CVE•added 2017/03/17 10:59 p.m.•45 views

CVE-2017-3872

A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases: ...

6.1CVSS5.9AI score0.00238EPSS
CVE
CVE•added 2017/11/30 9:29 a.m.•43 views

CVE-2017-12357

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insuffic...

5.4CVSS5.2AI score0.00235EPSS