CVE-2015-6360

CVE-2015-6360 affects libsrtp/libSRTP, with several advisories noting that the encryption-processing feature allows remote DoS via crafted SRTP packets. The root cause in the reports is improper handling of CSRC count and extension header length in RTP headers, leading to vulnerable RTP processin...

CVE-2023-20266

CVE-2023-20266 affects Cisco Emergency Responder, Unified CM, Unified CM SME, and Cisco Unity Connection. The issue stems from improper restrictions on upgrade files, where a crafted upgrade package could enable an authenticated attacker with platform administrator credentials to elevate privileg...

CVE-2017-6779

CVE-2017-6779 affects multiple Cisco VOS-based products (Emergency Responder, Finesse, UCM family, Unity Connection, UIC, SME, UCCx, MediaSense, Prime products, and related). Root cause: system log file has no maximum size limit, enabling an unauthenticated, remote attacker to cause high disk uti...

CVE-2015-0613

CVE-2015-0613 affects Cisco Unity Connection CuCsMgr: vulnerability arises when SIP trunk integration is enabled, allowing unauthenticated remote attackers to trigger a DoS (core dump and restart) by sending crafted SIP INVITE messages. Affected software includes Unity Connection 8.5 before 8.5(1...

CVE-2015-0612

Cisco Unity Connection is affected by CVE-2015-0612 (CuCsMgr DoS) when SIP trunk integration is enabled. Affected are 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2 (and 10.x prior to 10.0(1)SU1 per Nessus plugin). The issue arises from CuCsMgr’s improper handling of specif...

CVE-2015-0614

CVE-2015-0614 affects Cisco Unity Connection CuCsMgr and is triggered when SIP trunk integration is enabled. The vulnerability allows unauthenticated remote attackers to cause a denial of service (core dump and restart) by sending crafted SIP INVITE messages to affected versions (8.5 < 8.5(1)S...

CVE-2012-0367

Cisco Unity Connection is affected by CVE-2012-0367, a remote denial of service caused by the improper handling of TCP segments. Affected versions include: Privilege Escalation vulnerability: prior to 7.1, 7.1, and 8.0/8.5/8.6 are listed in Cisco advisories as affected for the related issue, with...

CVE-2015-0616

CVE-2015-0616 affects Cisco Unity Connection’s Connection Conversation Manager (CuCsMgr) when SIP trunk integration is enabled. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections. Affected...

CVE-2015-0615

CVE-2015-0615 affects Cisco Unity Connection; DoS via SIP call handling when SIP trunk integration is enabled. Affected versions: 8.5 (before 8.5(1)SU7), 8.6 (before 8.6(2a)SU4), 9.x (before 9.1(2)SU2), 10.0 (before 10.0(1)SU1). Root cause: SIP session termination can fail to release resources, l...

CVE-2012-3060

CVE-2012-3060 affects Cisco Unity Connection (UC) versions 8.6, 9.0, and 9.5. The vulnerability allows remote attackers to cause a denial of service by sending malformed UDP packets, leading to CPU consumption. The underlying cause is malformed UDP handling in UC that triggers high CPU usage. Pub...

CVE-2026-20035

Cisco Unity Connection Web Inbox SSRF: unauthenticated attacker can cause the affected device to issue arbitrary network requests via crafted HTTP requests due to improper input validation. Affected component is the web UI; CVSS 3.1 base score 7.2 (NETWORK, HIGH). Exploitation status and remediat...