Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified communications manager - vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-0057
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x prior to 5.1(3e) and 6.x prior to 6.1(3) allows remote malicious users to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which th...
Cisco Unified Communications Manager 5.0 4Cisco Unified Communications Manager 5.0 3aCisco Unified Communications Manager 5.1.2Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 5.1 3aCisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 5.0 4aCisco Unified Communications Manager 5.0 4a Su1Cisco Unified Communications Manager 5.0 2Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1 1Cisco Unified Communications Manager 5.0Cisco Unified Communications Manager 5.0 1Cisco Unified Communications Manager 5.1 2bCisco Unified Communications Manager 5.1 2aCisco Unified Communications Manager 6.0 1Cisco Unified Communications Manager 6.0 1aCisco Unified Communications Manager 6.1.0Cisco Unified Communications Manager 5.0 3Cisco Unified Communications Manager 5.1\\(1\\)
7.8
CVSSv2
CVE-2008-1744
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 prior to 4.1(3)SR7, 4.2 prior to 4.2(3)SR4, and 4.3 prior to 4.3(2) allows remote malicious users to cause a denial of service (service crash) via malformed network traffic,...
Cisco Unified Callmanager 4.1Cisco Unified Communications Manager 4.2 3 Sr3Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.0 1Cisco Unified Communications Manager 6.0 1aCisco Unified Callmanager 4.1 3 Sr4Cisco Unified Callmanager 4.1 3 Sr5Cisco Unified Communications Manager 4.3 1 Sr1Cisco Unified Communications Manager 5.1 1Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1 1aCisco Unified Communications Manager 4.2 3 Sr2Cisco Unified Communications Manager 4.2 3 Sr2bCisco Unified Communications Manager 5.1 2bCisco Unified Communications Manager 5.1 3aCisco Unified Callmanager 4.1 3 Sr5bCisco Unified Callmanager 4.1 3 Sr5cCisco Unified Communications Manager 5.1 2Cisco Unified Communications Manager 5.1 2a
6.8
CVSSv2
CVE-2014-0736
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...
Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.1Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.2
7.8
CVSSv2
CVE-2013-3453
Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...
Cisco Unified Communications Manager 8.5\\(1\\)su3Cisco Unified Communications Manager 8.5\\(1\\)su2Cisco Unified Communications Manager 8.5\\(1\\)su1Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 7.1\\(5b\\)su6Cisco Unified Communications Manager 7.1\\(5b\\)su5Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 5.1.2Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)
9
CVSSv2
CVE-2009-0632
The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.3\\(2\\)sr1Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1Cisco Unified Communications Manager 4.2\\(3\\)sr4Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3Cisco Unified Communications Manager 4.2\\(3\\)sr2bCisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1\\(2\\)su1
7.8
CVSSv2
CVE-2011-2562
Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x prior to 6.1(5)su2, 7.x prior to 7.1(5b)su3, 8.x prior to 8.0(3a)su1, and 8.5 prior to 8.5(1) allows remote malicious users to cause a denial of service (service outage) via a S...
Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 8.0\\(3a\\)Cisco Unified Communications Manager 8.5Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su2
7.8
CVSSv2
CVE-2011-0941
Memory leak in Cisco Unified Communications Manager (CUCM) 6.x prior to 6.1(5)su2, 7.x prior to 7.1(5b)su3, 8.x prior to 8.0(3a)su1, and 8.5 prior to 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote malicious users to cause a denial of service (memory consumption and process fa...
Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su2Cisco Unified Communications Manager 7.0\\(1\\)su1aCisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2b\\)
6.5
CVSSv2
CVE-2013-3412
SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) up to and including 9.1(2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuh81766.
Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(5b\\)su2Cisco Unified Communications Manager 7.1\\(5b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)su5Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(5b\\)su6Cisco Unified Communications Manager 7.1\\(5b\\)su1aCisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(5a\\)
6.5
CVSSv2
CVE-2013-3402
An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) up to and including 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.
Cisco Unified Communications Manager 7.1\\(5b\\)su6Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(5b\\)su2Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5b\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(5b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)su5Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)
6.8
CVSSv2
CVE-2010-3039
/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CS...
Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(3b\\)su1Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(3a\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.0\\(2a\\)su2Cisco Unified Communications Manager 7.0\\(1\\)su1a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook