Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoUnified Communications Manager

13 matches found

CVE
CVE•added 2019/07/06 2:15 a.m.•457 views

CVE-2019-1887

A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacke...

8.6CVSS7.9AI score0.00752EPSS
CVE
CVE•added 2023/08/16 10:15 p.m.•148 views

CVE-2023-20211

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This ...

8.8CVSS8.7AI score0.0008EPSS
CVE
CVE•added 2022/08/10 9:15 a.m.•115 views

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This vulne...

8.1CVSS6.9AI score0.00276EPSS
CVE
CVE•added 2022/04/21 7:15 p.m.•105 views

CVE-2022-20789

A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to write arbitrary files on the affected system. This vulnerability...

8.5CVSS5.8AI score0.00854EPSS
CVE
CVE•added 2023/01/20 7:15 a.m.•91 views

CVE-2023-20010

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This ...

8.8CVSS8.7AI score0.00211EPSS
CVE
CVE•added 2023/10/04 5:15 p.m.•84 views

CVE-2023-20259

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for device ...

8.6CVSS7.7AI score0.00186EPSS
CVE
CVE•added 2019/11/26 4:15 a.m.•82 views

CVE-2019-15972

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. An...

8.8CVSS7.2AI score0.04005EPSS
CVE
CVE•added 2020/09/23 1:15 a.m.•74 views

CVE-2020-3135

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. The vulnerability is due to insufficient CSRF protections for the web-base...

8.8CVSS7.9AI score0.00159EPSS
CVE
CVE•added 2017/08/07 6:29 a.m.•49 views

CVE-2017-6757

A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass...

8.8CVSS8.9AI score0.00679EPSS
CVE
CVE•added 2011/05/03 10:55 p.m.•46 views

CVE-2011-1609

SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg8564...

8.5CVSS8.2AI score0.02092EPSS
CVE
CVE•added 2014/08/12 11:55 p.m.•44 views

CVE-2014-3338

The CTIManager module in Cisco Unified Communications Manager (CM) 10.0(1), when single sign-on is enabled, does not properly validate Kerberos SSO tokens, which allows remote authenticated users to gain privileges and execute arbitrary commands via crafted token data, aka Bug ID CSCum95491.

8.5CVSS7.6AI score0.0184EPSS
CVE
CVE•added 2019/01/10 4:29 p.m.•41 views

CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could expl...

8.8CVSS5.8AI score0.00182EPSS
CVE
CVE•added 2013/08/25 3:27 a.m.•37 views

CVE-2013-3462

Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358.

8.5CVSS7.8AI score0.08764EPSS