cisco unified communications manager 5.0 4 vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 prior to 5.1(3a) and 6.0/6.1 prior to 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.

1 EDB exploit

NA

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...

Cisco Unified Communications Manager 4.1 Cisco Unified Communications Manager 4.3\\(2\\)sr1 Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1 Cisco Unified Communications Manager 4.2\\(3\\)sr4 Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3 Cisco Unified Communications Manager 4.2\\(3\\)sr2b Cisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.1\\(2\\)su1

NA

Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x prior to 6.1(5)SU2, 7.x prior to 7.1(5b)SU2, and 8.x prior to 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (U...

Cisco Unified Ip Interactive Voice Response -Cisco Unified Ip Ivr 7.0\\(1\\)Cisco Unified Ip Ivr 7.0\\(2\\)Cisco Unified Ip Ivr 8.0\\(1\\)Cisco Unified Ip Ivr 8.5\\(1\\)Cisco Unified Ip Ivr 6.0\\(1\\)Cisco Unified Ip Ivr 8.0\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1a Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1 Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(1\\)

1 EDB exploit

NA

Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...

Cisco Unified Communications Manager 8.5\\(1\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 7.1\\(5b\\)su6 Cisco Unified Communications Manager 7.1\\(5b\\)su5 Cisco Unified Communications Manager 7.1\\(5b\\)su4 Cisco Unified Communications Manager 7.1\\(5b\\)su3 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)

NA

Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and previous versions allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCu...

Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5\\(1\\)su5 Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(5\\)su3 Cisco Unified Communications Manager 6.1\\(5\\)su2 Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.0\\(1b\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 5.1\\(1\\)

NA

Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

Cisco Unified Communications Manager 8.6\\(2a\\)su1 Cisco Unified Communications Manager 8.6\\(2a\\)Cisco Unified Communications Manager 8.6\\(2\\)Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1 Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5\\)su1a Cisco Unified Communications Manager 7.1\\(5\\)su1 Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1a Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 5.1\\(2\\)

NA

The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and previous versions does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka B...

Cisco Unified Communications Manager 4.1\\(3\\)sr3 Cisco Unified Communications Manager 4.1\\(3\\)sr4 Cisco Unified Communications Manager 4.2 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 5.1\\(2a\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(2\\)su1a Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 7.0\\(2a\\)su1 Cisco Unified Communications Manager 7.0\\(2a\\)su2 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)su1a Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 8.0\\(1\\)

NA

The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and previous versions allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj3924...

Cisco Unified Communications Manager 9.0\\(1\\)Cisco Unified Communications Manager 8.6\\(4\\)Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 8.0\\(3a\\)su3 Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(5b\\)su2 Cisco Unified Communications Manager 7.1\\(5b\\)su1a Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1 Cisco Unified Communications Manager 8.6\\(3\\)Cisco Unified Communications Manager 8.6\\(2a\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su5 Cisco Unified Communications Manager 8.5\\(1\\)su4 Cisco Unified Communications Manager 8.0\\(3a\\)su2 Cisco Unified Communications Manager 8.0\\(3a\\)su1 Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(1\\)

NA

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x prior to 5.1(3g), 6.x prior to 6.1(4), 7.0.x prior to 7.0(2a)su1, and 7.1.x prior to 7.1(2) allows remote malicious users to cause a denial of service (service restart) via malformed SIP messages, aka Bug I...

Cisco Unified Communications Manager 5.1\\(1c\\)Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1 Cisco Unified Callmanager 5.0\\(3a\\)Cisco Unified Callmanager 5.0\\(3\\)Cisco Unified Callmanager 5.1\\(1c\\)Cisco Unified Callmanager 5.1\\(2\\)Cisco Unified Callmanager 5.1\\(1\\)Cisco Unified Callmanager 6.0\\(1\\)Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Callmanager 5.0\\(1\\)Cisco Unified Callmanager 5.0\\(4\\)Cisco Unified Callmanager 5.1\\(1a\\)Cisco Unified Callmanager 5.1 Cisco Unified Callmanager 5.1\\(3b\\)Cisco Unified Callmanager 5.1\\(3c\\)

10

CVSSv3

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1153 Github repositories28 Articles

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook