cisco unified communications manager 4.2 3 sr3 vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) prior to 3.3(5)sr2b, 4.1 prior to 4.1(3)sr5, 4.2 prior to 4.2(3)sr2, and 4.3 prior to 4.3(1)sr1 allow remote malicious users to execute arbitrary SQL commands via the lang variab...

Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Call Manager 4.1\\(3\\)sr4 Cisco Call Manager 4.2 Cisco Call Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Call Manager 4.1\\(3\\)sr2 Cisco Call Manager 4.1\\(3\\)sr3 Cisco Call Manager 4.2\\(3\\)sr2 Cisco Call Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Call Manager 3.3\\(5\\)sr2a Cisco Call Manager 4.1 Cisco Call Manager 4.1\\(3\\)sr1

1 EDB exploit

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote malicious users to cause a denial of service (memory consumption and restart) by making many connections, aka...

Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.3

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.3\\(2\\)sr1 Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1 Cisco Unified Communications Manager 4.2\\(3\\)sr4 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3 Cisco Unified Communications Manager 4.2\\(3\\)sr2b Cisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.1\\(2\\)su1

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...

Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.2

The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x prior to 4.3(2)sr1a, 6.x prior to 6.1(3), 7.0x prior to 7.0(2), 7.1x prior to 7.1(2), and 8.x prior to 8.0(1) allows remote malicious users to cause a denial of service (service f...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.1.1 Cisco Unified Communications Manager 4.1.2 Cisco Unified Communications Manager 4.1.3 Cisco Unified Communications Manager 4.2 2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1 Cisco Unified Communications Manager 4.2 3sr1 Cisco Unified Communications Manager 4.2.3 Sr3 Cisco Unified Communications Manager 4.2 1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.3.1

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum4648...

Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.

Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the auth...

Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.

Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1

The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468.

Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook