CVE-2022-20752

CVE-2022-20752 affects Cisco Unified Communications Manager (Unified CM), Unified CM Session Management Edition (Unified CM SME), and Cisco Unity Connection. The issue is a timing attack caused by insufficient protection of a system password, enabling an unauthenticated remote attacker to infer a...

CVE-2018-0203

CVE-2018-0203 : A vulnerability in the SMTP relay of Cisco Unity Connection allows an unauthenticated, remote attacker to send unsolicited email messages due to improper handling of domain information. A successful exploit could deliver emails to arbitrary addresses. Affected product: Cisco Unity...

CVE-2018-15403

CVE-2018-15403 describes an open redirect vulnerability in Cisco Emergency Responder (CER) and related Cisco Unified Communications products (CER, UCM, UCM IM&P, Unity Connection). The issue stems from improper input validation of HTTP request parameters in the web interface, enabling an authenti...

CVE-2017-6629

The CVE-2017-6629 entry concerns Cisco Unity Connection 10.5(2). Affected component: ImageID parameter handling in HTTP POST submissions. Root cause: improper sanitization of filenames in user-supplied input, enabling directory traversal. Impact: an unauthenticated, remote attacker could access f...

CVE-2013-1129

CVE-2013-1129 affects Cisco Unity Connection 9.x, where a memory leak can be triggered by unauthenticated remote attackers sending many TCP requests, leading to memory consumption and eventual process crash (DoS). Cisco advisory CSCud59736 confirms unauthenticated, remote exploitation via crafted...