Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified communications manager 4.2 2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0632
The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.3\\(2\\)sr1Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1Cisco Unified Communications Manager 4.2\\(3\\)sr4Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3Cisco Unified Communications Manager 4.2\\(3\\)sr2bCisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1\\(2\\)su1
NA
CVE-2010-0592
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x prior to 4.3(2)sr1a, 6.x prior to 6.1(3), 7.0x prior to 7.0(2), 7.1x prior to 7.1(2), and 8.x prior to 8.0(1) allows remote malicious users to cause a denial of service (service f...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.1.1Cisco Unified Communications Manager 4.1.2Cisco Unified Communications Manager 4.1.3Cisco Unified Communications Manager 4.2 2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1Cisco Unified Communications Manager 4.2 3sr1Cisco Unified Communications Manager 4.2.3 Sr3Cisco Unified Communications Manager 4.2 1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.3.1
NA
CVE-2010-0587
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x prior to 4.3(2)SR2, 6.x prior to 6.1(5), 7.x prior to 7.1(3a)su1, and 8.x prior to 8.0(1) allows remote malicious users to cause a denial of service (process failure) via a malformed SCCP StationCapabilitie...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1Cisco Unified Communications Manager 4.1.3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2 2Cisco Unified Communications Manager 4.2 3Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1.0Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 4.2\\(3\\)sr2bCisco Unified Communications Manager 4.1.1Cisco Unified Communications Manager 4.1.2Cisco Unified Communications Manager 4.2 1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.3
NA
CVE-2007-4634
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) prior to 3.3(5)sr2b, 4.1 prior to 4.1(3)sr5, 4.2 prior to 4.2(3)sr2, and 4.3 prior to 4.3(1)sr1 allow remote malicious users to execute arbitrary SQL commands via the lang variab...
Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.3\\(1\\)Cisco Call Manager 4.1\\(3\\)sr4Cisco Call Manager 4.2Cisco Call Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Call Manager 4.1\\(3\\)sr2Cisco Call Manager 4.1\\(3\\)sr3Cisco Call Manager 4.2\\(3\\)sr2Cisco Call Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Call Manager 3.3\\(5\\)sr2aCisco Call Manager 4.1Cisco Call Manager 4.1\\(3\\)sr1
NA
CVE-2008-1745
Cisco Unified Communications Manager (CUCM) 5.x prior to 5.1(2) and 6.x prior to 6.1(1) allows remote malicious users to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115.
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.0
NA
CVE-2008-1746
The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 prior to 4.1(3)SR6, 4.2 prior to 4.2(3)SR3, 4.3 prior to 4.3(2), 5.x prior to 5.1(3), and 6.x prior to 6.1(1) allows remote malicious users to cause a denial of service (core dump and service restart) ...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.0
NA
CVE-2013-3453
Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...
Cisco Unified Communications Manager 8.5\\(1\\)su3Cisco Unified Communications Manager 8.5\\(1\\)su2Cisco Unified Communications Manager 8.5\\(1\\)su1Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 7.1\\(5b\\)su6Cisco Unified Communications Manager 7.1\\(5b\\)su5Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 5.1.2Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)
NA
CVE-2008-1744
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 prior to 4.1(3)SR7, 4.2 prior to 4.2(3)SR4, and 4.3 prior to 4.3(2) allows remote malicious users to cause a denial of service (service crash) via malformed network traffic,...
Cisco Unified Callmanager 4.1Cisco Unified Communications Manager 4.2 3 Sr3Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.0 1Cisco Unified Communications Manager 6.0 1aCisco Unified Callmanager 4.1 3 Sr4Cisco Unified Callmanager 4.1 3 Sr5Cisco Unified Communications Manager 4.3 1 Sr1Cisco Unified Communications Manager 5.1 1Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1 1aCisco Unified Communications Manager 4.2 3 Sr2Cisco Unified Communications Manager 4.2 3 Sr2bCisco Unified Communications Manager 5.1 2bCisco Unified Communications Manager 5.1 3aCisco Unified Callmanager 4.1 3 Sr5bCisco Unified Callmanager 4.1 3 Sr5cCisco Unified Communications Manager 5.1 2Cisco Unified Communications Manager 5.1 2a
NA
CVE-2013-6688
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and previous versions allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCu...
Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6Cisco Unified Communications Manager 8.5\\(1\\)su5Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.0\\(1\\)su1Cisco Unified Communications Manager 6.1\\(5\\)su3Cisco Unified Communications Manager 6.1\\(5\\)su2Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.0\\(1b\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 5.1\\(1\\)
NA
CVE-2013-6689
Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.
Cisco Unified Communications Manager 8.6\\(2a\\)su1Cisco Unified Communications Manager 8.6\\(2a\\)Cisco Unified Communications Manager 8.6\\(2\\)Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1aCisco Unified Communications Manager 7.0\\(1\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 5.1\\(2\\)
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook