cisco unified communications manager 5.0 2 vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 prior to 5.1(3a) and 6.0/6.1 prior to 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

1 EDB exploit

NA

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.3\\(2\\)sr1 Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1 Cisco Unified Communications Manager 4.2\\(3\\)sr4 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3 Cisco Unified Communications Manager 4.2\\(3\\)sr2b Cisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.1\\(2\\)su1

NA

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x prior to 5.1(3e) and 6.x prior to 6.1(3) allows remote malicious users to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which th...

Cisco Unified Communications Manager 5.0 4 Cisco Unified Communications Manager 5.0 3a Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1 Cisco Unified Communications Manager 5.1 3a Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.0 4a Cisco Unified Communications Manager 5.0 4a Su1 Cisco Unified Communications Manager 5.0 2 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1 1 Cisco Unified Communications Manager 5.0 Cisco Unified Communications Manager 5.0 1 Cisco Unified Communications Manager 5.1 2b Cisco Unified Communications Manager 5.1 2a Cisco Unified Communications Manager 6.0 1 Cisco Unified Communications Manager 6.0 1a Cisco Unified Communications Manager 6.1.0 Cisco Unified Communications Manager 5.0 3 Cisco Unified Communications Manager 5.1\\(1\\)

NA

Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote malicious users to cause a denial of service (loss of cluster services) via unspecified vectors, aka (1) CSCsj09859 and (2) CSCsj19985.

Cisco Unified Presence Server 1.0\\(2\\)Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Communications Manager 5.0 Cisco Unified Presence Server 1.0 Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(2\\)

NA

Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote malicious users to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) ...

Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Communications Manager 5.0 Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Presence Server 1.0\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Presence Server 1.0

NA

Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x prior to 6.1(5)SU2, 7.x prior to 7.1(5b)SU2, and 8.x prior to 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (U...

Cisco Unified Ip Interactive Voice Response -Cisco Unified Ip Ivr 7.0\\(1\\)Cisco Unified Ip Ivr 7.0\\(2\\)Cisco Unified Ip Ivr 8.0\\(1\\)Cisco Unified Ip Ivr 8.5\\(1\\)Cisco Unified Ip Ivr 6.0\\(1\\)Cisco Unified Ip Ivr 8.0\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1a Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1 Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(1\\)

1 EDB exploit

NA

Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...

Cisco Unified Communications Manager 8.5\\(1\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 7.1\\(5b\\)su6 Cisco Unified Communications Manager 7.1\\(5b\\)su5 Cisco Unified Communications Manager 7.1\\(5b\\)su4 Cisco Unified Communications Manager 7.1\\(5b\\)su3 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)

NA

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x prior to 5.1(3g), 6.x prior to 6.1(4), 7.0.x prior to 7.0(2a)su1, and 7.1.x prior to 7.1(2) allows remote malicious users to cause a denial of service (service restart) via malformed SIP messages, aka Bug I...

Cisco Unified Communications Manager 5.1\\(1c\\)Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Callmanager 5.0\\(3a\\)Cisco Unified Callmanager 5.0\\(3\\)Cisco Unified Callmanager 5.1\\(1c\\)Cisco Unified Callmanager 5.1\\(2\\)Cisco Unified Callmanager 5.1\\(1\\)Cisco Unified Callmanager 6.0\\(1\\)Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Callmanager 5.0\\(1\\)Cisco Unified Callmanager 5.0\\(4\\)Cisco Unified Callmanager 5.1\\(1a\\)Cisco Unified Callmanager 5.1 Cisco Unified Callmanager 5.1\\(3b\\)Cisco Unified Callmanager 5.1\\(3c\\)

NA

The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests...

Cisco Unified Presence 1.0 Cisco Unified Presence 6.0 Cisco Mobility Manager 2.0 Cisco Unified Communications Manager 5.0 Cisco Unified Communications Manager 5.1 Cisco Emergency Responder 2.0 Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.1

NA

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and previous versions allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCu...

Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5\\(1\\)su5 Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(5\\)su3 Cisco Unified Communications Manager 6.1\\(5\\)su2 Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.0\\(1b\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 5.1\\(1\\)

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook