CVE-2008-1158

CVE-2008-1158 affects the Presence Engine (PE) service in Cisco Unified Presence before version 6.0(1). A remote attacker can trigger a denial-of-service (core dump and service interruption) by sending malformed packets (Bug ID CSCsh50164). The issue is documented in Cisco’s advisory Cisco Securi...

CVE-2007-1826

CVE-2007-1826 affects Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3). The issue is an unspecified vulnerability that lets remote attackers cause a denial of service (loss of cluster services) by sending a specific UDP packet to UD...

CVE-2009-2874

The CVE-2009-2874 entry affects Cisco Unified Presence, specifically the TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4). The underlying issue is a DoS condition caused by a large number of TCP connections to ports 16200 and 22794, which can crash the Tim...

CVE-2007-3775

CVE-2007-3775 affects Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS). The available documents describe an unspecified vulnerability that allows remote attackers to cause a denial of service (loss of cluster services). The exact vulnerable comp...

CVE-2007-3776

CVE-2007-3776 affects Cisco Unified Communications Manager (CUCM) and Unified Presence Server (CUPS). The issue is an information disclosure vulnerability where remote attackers can obtain sensitive data (SNMP community strings and configuration settings) through unspecified vectors. The sources ...

CVE-2011-1643

CVE-2011-1643 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence Server. Affected CUCM versions: 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2; Presence Server: 6.x, 7.x, 8.0, and 8.5 before 8.5xnr. Root cause: an open query interface could disclose databas...

CVE-2015-4220

The CVE-2015-4220 entry concerns Cisco Unified Presence Server 9.1(1) with a Cross‑Site Scripting (XSS) vulnerability. The root cause is insufficient input validation of a user-supplied value, enabling remote attackers to inject arbitrary web script or HTML. Affected product is Cisco Unified Pres...

CVE-2010-2839

Cisco Unified Presence (6.x prior to 6.0(7) and 7.x prior to 7.0(8)) is affected by CVE-2010-2839, a DoS caused by processing malformed SIP messages. The vulnerability triggers stack memory corruption and possible process failure, potentially interrupting presence services. Cisco’s advisory indic...

CVE-2007-1834

CVE-2007-1834 affects Cisco Unified CallManager (CUCM) 5.0 prior to 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 prior to 1.0(3). The vulnerability allows unauthenticated, remote attackers to cause a denial of service (loss of voice services) by sending a flood of ICMP echo requests. R...

CVE-2013-1137

CVE-2013-1137 affects Cisco Unified Presence Server (CUPS) versions 8.6, 9.0 and 9.1 before 9.1.1. The vulnerability allows remote, unauthenticated attackers to cause a denial of service via crafted packets sent to the SIP TCP port (TCP 5060), consuming CPU resources. Root cause is a DoS conditio...

CVE-2014-3339

The CVE-2014-3339 issue affects Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS). The root cause is insufficient sanitization of user-supplied input in the administrative web interface, enabling an authenticated, remote attacker to perform SQL injection on unspec...

CVE-2006-5553

Cisco Security Agent (CSA) for Linux is affected in 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as deployed with Unified CallManager (CUCM) and Unified Presence Server (CUPS). The issue allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain opt...

CVE-2010-2840

Cisco CVE-2010-2840 affects the Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8). A malformed SIP SUBSCRIBE header with an erroneous Contact field can cause a DoS (process failure). The issue is resolved in 6.0(7) and 7.0(8) by official fixes; no expl...

CVE-2013-1242

CVE-2013-1242 affects Cisco Unified Presence (CUP) web framework on the server. The vulnerability is a memory leak caused by improper handling of memory allocation when the system is flooded with malformed TCP packets, enabling an unauthenticated remote attacker to cause memory exhaustion and a D...

CVE-2014-3328

CVE-2014-3328 affects Cisco Unified Presence Server’s Intercluster Sync Agent Service. A remote attacker can trigger a denial-of-service by sending大量 TCP SYN traffic, exploiting a SYN flood condition (Bug CSCun34125). Cisco’s advisory notes that software updates are not available to fix this vuln...

CVE-2013-6983

Cisco Unified Presence Server (version 8.6(4) noted in SAF) web interface contains a SQL injection vulnerability due to failure to validate user input in SQL queries. An authenticated, remote attacker can exploit crafted URLs to execute arbitrary SQL commands, impacting confidentiality, integrity...