Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoUnity Connection

23 matches found

CVE
CVE•added 2022/04/21 7:15 p.m.•134 views

CVE-2022-20788

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against...

6.1CVSS6AI score0.0032EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•92 views

CVE-2021-1380

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00346EPSS
CVE
CVE•added 2022/07/06 9:15 p.m.•81 views

CVE-2022-20800

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection coul...

6.1CVSS6AI score0.00489EPSS
CVE
CVE•added 2021/04/08 4:15 a.m.•74 views

CVE-2021-1409

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connec...

6.1CVSS6.1AI score0.00346EPSS
CVE
CVE•added 2017/09/07 9:29 p.m.•63 views

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain par...

6.1CVSS6AI score0.00308EPSS
CVE
CVE•added 2020/09/23 1:15 a.m.•62 views

CVE-2020-3130

A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP r...

6.5CVSS5.9AI score0.00107EPSS
CVE
CVE•added 2018/06/07 9:29 p.m.•60 views

CVE-2018-0354

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters ...

6.1CVSS6AI score0.00451EPSS
CVE
CVE•added 2021/01/13 10:15 p.m.•58 views

CVE-2021-1226

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager cou...

6.5CVSS5.2AI score0.00225EPSS
CVE
CVE•added 2019/10/02 7:15 p.m.•55 views

CVE-2019-1915

A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and Cisco Unity Connection could allow an unauthenticated, remot...

6.5CVSS6.7AI score0.00184EPSS
CVE
CVE•added 2019/10/02 7:15 p.m.•50 views

CVE-2019-12707

A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient va...

6.1CVSS6AI score0.00153EPSS
CVE
CVE•added 2014/01/10 4:47 p.m.•49 views

CVE-2014-0664

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976.

6.8CVSS6.4AI score0.01842EPSS
CVE
CVE•added 2020/07/02 1:15 p.m.•49 views

CVE-2020-3282

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to c...

6.1CVSS5.9AI score0.00153EPSS
CVE
CVE•added 2025/06/04 5:15 p.m.•49 views

CVE-2025-20278

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied comman...

6.7CVSS7.6AI score0.00018EPSS
CVE
CVE•added 2015/05/07 1:59 a.m.•46 views

CVE-2015-0715

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.

6.5CVSS8.2AI score0.00287EPSS
CVE
CVE•added 2018/10/05 2:29 p.m.•46 views

CVE-2018-15396

A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not restrict the maximum size ...

6.8CVSS6.6AI score0.00613EPSS
CVE
CVE•added 2015/12/12 4:59 p.m.•43 views

CVE-2015-6408

Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578.

6.8CVSS7.4AI score0.00126EPSS
CVE
CVE•added 2016/04/12 11:59 p.m.•43 views

CVE-2016-1377

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.

6.1CVSS6AI score0.0025EPSS
CVE
CVE•added 2019/02/21 8:29 p.m.•42 views

CVE-2019-1685

A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability is due to...

6.1CVSS5.9AI score0.0014EPSS
CVE
CVE•added 2016/01/30 12:59 p.m.•41 views

CVE-2016-1304

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596.

6.1CVSS5.9AI score0.0025EPSS
CVE
CVE•added 2014/08/11 8:55 p.m.•40 views

CVE-2014-3336

SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted request, aka Bug ID CSCuq31016.

6.5CVSS8.1AI score0.00732EPSS
CVE
CVE•added 2015/09/20 2:59 p.m.•40 views

CVE-2015-6299

SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824.

6.5CVSS8.1AI score0.00287EPSS
CVE
CVE•added 2015/05/07 1:59 a.m.•38 views

CVE-2015-0716

Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.

6.8CVSS7.4AI score0.00116EPSS
CVE
CVE•added 2016/01/27 10:59 p.m.•37 views

CVE-2016-1300

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582.

6.1CVSS5.9AI score0.0025EPSS