cisco unified communications manager 10.0 vulnerabilities and exploits

(subscribe to this query)

NA

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...

Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.2

NA

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum4648...

Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

NA

The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.

Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1

NA

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.

Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b

NA

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.

Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

NA

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the auth...

Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

NA

The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions does not properly enforce authentication requirements, which allows remote malicious users to read application files via a direct request to a U...

Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.3sr2b

NA

The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions does not properly enforce authentication requirements, which allows remote malicious users to read ELM files via a direct request to a URL, aka Bug ID...

Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

NA

The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum9546...

Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

NA

The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468.

Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook