cisco unified communications manager 5.0 3 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 prior to 5.1(3a) and 6.0/6.1 prior to 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

1 EDB exploit

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.3\\(2\\)sr1 Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1 Cisco Unified Communications Manager 4.2\\(3\\)sr4 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3 Cisco Unified Communications Manager 4.2\\(3\\)sr2b Cisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.1\\(2\\)su1

Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...

Cisco Unified Communications Manager 8.5\\(1\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 7.1\\(5b\\)su6 Cisco Unified Communications Manager 7.1\\(5b\\)su5 Cisco Unified Communications Manager 7.1\\(5b\\)su4 Cisco Unified Communications Manager 7.1\\(5b\\)su3 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)

Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote malicious users to cause a denial of service (loss of cluster services) via unspecified vectors, aka (1) CSCsj09859 and (2) CSCsj19985.

Cisco Unified Presence Server 1.0\\(2\\)Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Communications Manager 5.0 Cisco Unified Presence Server 1.0 Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(2\\)

Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote malicious users to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) ...

Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Communications Manager 5.0 Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Presence Server 1.0\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Presence Server 1.0

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and previous versions allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCu...

Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5\\(1\\)su5 Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(5\\)su3 Cisco Unified Communications Manager 6.1\\(5\\)su2 Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.0\\(1b\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 5.1\\(1\\)

Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Cisco Unified Communications Manager 8.6\\(2a\\)su1 Cisco Unified Communications Manager 8.6\\(2a\\)Cisco Unified Communications Manager 8.6\\(2\\)Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1 Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5\\)su1a Cisco Unified Communications Manager 7.1\\(5\\)su1 Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 5.1\\(2\\)

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka B...

Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 5.1\\(2a\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(2\\)su1a Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 7.0\\(2a\\)su1 Cisco Unified Communications Manager 7.0\\(2a\\)su2 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)su1a Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 8.0\\(1\\)

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and previous versions allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj3924...

Cisco Unified Communications Manager 9.0\\(1\\)Cisco Unified Communications Manager 8.6\\(4\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 8.0\\(3a\\)su3 Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(5b\\)su2 Cisco Unified Communications Manager 7.1\\(5b\\)su1a Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1 Cisco Unified Communications Manager 8.6\\(3\\)Cisco Unified Communications Manager 8.6\\(2a\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su5 Cisco Unified Communications Manager 8.5\\(1\\)su4 Cisco Unified Communications Manager 8.0\\(3a\\)su2 Cisco Unified Communications Manager 8.0\\(3a\\)su1 Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x prior to 5.1(3e) and 6.x prior to 6.1(3) allows remote malicious users to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which th...

Cisco Unified Communications Manager 5.0 4 Cisco Unified Communications Manager 5.0 3a Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1 Cisco Unified Communications Manager 5.1 3a Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.0 4a Cisco Unified Communications Manager 5.0 4a Su1 Cisco Unified Communications Manager 5.0 2 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1 1 Cisco Unified Communications Manager 5.0 Cisco Unified Communications Manager 5.0 1 Cisco Unified Communications Manager 5.1 2b Cisco Unified Communications Manager 5.1 2a Cisco Unified Communications Manager 6.0 1 Cisco Unified Communications Manager 6.0 1a Cisco Unified Communications Manager 6.1.0 Cisco Unified Communications Manager 5.0 3 Cisco Unified Communications Manager 5.1\\(1\\)

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook