Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified contact center express 8.0 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2011-2583
Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote malicious users to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
Cisco Unified Contact Center Express 8.5Cisco Unified Contact Center Express 8.0
785
VMScore
CVE-2011-3315
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x prior to 6.1(5)SU2, 7.x prior to 7.1(5b)SU2, and 8.x prior to 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (U...
Cisco Unified Ip Interactive Voice Response -Cisco Unified Ip Ivr 7.0\\(1\\)Cisco Unified Ip Ivr 7.0\\(2\\)Cisco Unified Ip Ivr 8.0\\(1\\)Cisco Unified Ip Ivr 8.5\\(1\\)Cisco Unified Ip Ivr 6.0\\(1\\)Cisco Unified Ip Ivr 8.0\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(1\\)
676
VMScore
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
828
VMScore
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
694
VMScore
CVE-2012-3949
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x prior to 7.1(5b)su5, 8.x prior to 8.5(1)su4, and 8.6 prior to 8.6(2a)su1; Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.2; and Cisco IOS XE 3.3.xSG prior to 3.3.1SG, 3.4.xS...
Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4b\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 8.0\\(1\\)Cisco Ios 12.2byCisco Ios 12.2bzCisco Ios 12.2caCisco Ios 12.2cxCisco Ios 12.2irbCisco Ios 12.2ixaCisco Ios 12.2ixbCisco Ios 12.2ixcCisco Ios 12.2seaCisco Ios 12.2sebCisco Ios 12.2secCisco Ios 12.2sedCisco Ios 12.2svaCisco Ios 12.2svc
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
384
VMScore
CVE-2015-1788
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1d
383
VMScore
CVE-2015-0285
The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote malicious users to defeat cryptographic protection mechanisms by sniffing the network and then...
Openssl Openssl 1.0.2
445
VMScore
CVE-2015-0290
The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 prior to 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote malicious users to cause a denial of service (pointer cor...
Openssl Openssl 1.0.2
446
VMScore
CVE-2015-0291
The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.
Openssl Openssl 1.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook