cisco unified communications manager 4.1 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...

Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.2

7.8

CVSSv2

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote malicious users to cause a denial of service (memory consumption and restart) by making many connections, aka...

Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.3

5

CVSSv2

The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.

Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.

Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

6.2

CVSSv2

The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum9546...

Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

6.8

CVSSv2

The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.

Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3

7.5

CVSSv2

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum4648...

Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the auth...

Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

6.2

CVSSv2

The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.

Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1

5

CVSSv2

The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468.

Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook