cisco unified communications manager 4.2.3 sr3 vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) prior to 3.3(5)sr2b, 4.1 prior to 4.1(3)sr5, 4.2 prior to 4.2(3)sr2, and 4.3 prior to 4.3(1)sr1 allow remote malicious users to execute arbitrary SQL commands via the lang variab...

Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Call Manager 4.1\\(3\\)sr4 Cisco Call Manager 4.2 Cisco Call Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Call Manager 4.1\\(3\\)sr2 Cisco Call Manager 4.1\\(3\\)sr3 Cisco Call Manager 4.2\\(3\\)sr2 Cisco Call Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Call Manager 3.3\\(5\\)sr2a Cisco Call Manager 4.1 Cisco Call Manager 4.1\\(3\\)sr1

1 EDB exploit

Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...

Cisco Unified Communications Manager 8.5\\(1\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 7.1\\(5b\\)su6 Cisco Unified Communications Manager 7.1\\(5b\\)su5 Cisco Unified Communications Manager 7.1\\(5b\\)su4 Cisco Unified Communications Manager 7.1\\(5b\\)su3 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote malicious users to cause a denial of service (memory consumption and restart) by making many connections, aka...

Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.3

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x prior to 4.3(2)SR2, 6.x prior to 6.1(5), 7.x prior to 7.1(3a)su1, and 8.x prior to 8.0(1) allows remote malicious users to cause a denial of service (process failure) via a malformed SCCP StationCapabilitie...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1 Cisco Unified Communications Manager 4.1.3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2 2 Cisco Unified Communications Manager 4.2 3 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)su1a Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1.0 Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 4.2\\(3\\)sr2b Cisco Unified Communications Manager 4.1.1 Cisco Unified Communications Manager 4.1.2 Cisco Unified Communications Manager 4.2 1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3

The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x prior to 4.3(2)sr1a, 6.x prior to 6.1(3), 7.0x prior to 7.0(2), 7.1x prior to 7.1(2), and 8.x prior to 8.0(1) allows remote malicious users to cause a denial of service (service f...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.1.1 Cisco Unified Communications Manager 4.1.2 Cisco Unified Communications Manager 4.1.3 Cisco Unified Communications Manager 4.2 2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1 Cisco Unified Communications Manager 4.2 3sr1 Cisco Unified Communications Manager 4.2.3 Sr3 Cisco Unified Communications Manager 4.2 1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.3.1

SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum4648...

Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b

Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Cisco Unified Communications Manager 8.6\\(2a\\)su1 Cisco Unified Communications Manager 8.6\\(2a\\)Cisco Unified Communications Manager 8.6\\(2\\)Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1 Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5\\)su1a Cisco Unified Communications Manager 7.1\\(5\\)su1 Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 5.1\\(2\\)

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the auth...

Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr2

The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.

Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager 4.2.2 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.3

Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...

Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1 Cisco Unified Communications Manager 4.1\\(3\\)sr2 Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 10.0 Cisco Unified Communications Manager 4.2.3 Cisco Unified Communications Manager 4.2.3sr1 Cisco Unified Communications Manager 4.2.3sr2 Cisco Unified Communications Manager 4.2.3sr2b Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2a Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2.1 Cisco Unified Communications Manager Cisco Unified Communications Manager 3.3\\(5\\)sr1 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.2.2

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook