Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified contact center express 8.5 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2011-2583
Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote malicious users to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
Cisco Unified Contact Center Express 8.5Cisco Unified Contact Center Express 8.0
445
VMScore
CVE-2013-1214
The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote malicious users to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.
Cisco Unified Contact Center Express Editor Software -
828
VMScore
CVE-2013-1169
Cisco Unified MeetingPlace Web Conferencing Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 2, and 8.5 prior to 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote malicious users to impersonate users via a craf...
Cisco Unified Meetingplace Web Conferencing Server 7.1Cisco Unified Meetingplace Web Conferencing Server 8.0Cisco Unified Meetingplace Web Conferencing Server 8.5
676
VMScore
CVE-2013-1168
The web server in Cisco Unified MeetingPlace Application Server 7.x prior to 7.1MR1 Patch 2, 8.0 prior to 8.0MR1 Patch 1, and 8.5 prior to 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote malicious users to hijack sessions by lev...
Cisco Unified Meetingplace 7.0.2Cisco Unified Meetingplace 7.0Cisco Unified Meetingplace 7.0.3Cisco Unified Meetingplace 7.1Cisco Unified Meetingplace 7.0.1Cisco Unified Meetingplace 8.0Cisco Unified Meetingplace 8.5Cisco Unified Meetingplace 8.5.1Cisco Unified Meetingplace 8.5.2Cisco Unified Meetingplace 8.5.3
785
VMScore
CVE-2011-3315
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x prior to 6.1(5)SU2, 7.x prior to 7.1(5b)SU2, and 8.x prior to 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (U...
Cisco Unified Ip Interactive Voice Response -Cisco Unified Ip Ivr 7.0\\(1\\)Cisco Unified Ip Ivr 7.0\\(2\\)Cisco Unified Ip Ivr 8.0\\(1\\)Cisco Unified Ip Ivr 8.5\\(1\\)Cisco Unified Ip Ivr 6.0\\(1\\)Cisco Unified Ip Ivr 8.0\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(1\\)
1000
VMScore
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
694
VMScore
CVE-2012-3949
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x prior to 7.1(5b)su5, 8.x prior to 8.5(1)su4, and 8.6 prior to 8.6(2a)su1; Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.2; and Cisco IOS XE 3.3.xSG prior to 3.3.1SG, 3.4.xS...
Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4b\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 8.0\\(1\\)Cisco Ios 12.2byCisco Ios 12.2bzCisco Ios 12.2caCisco Ios 12.2cxCisco Ios 12.2irbCisco Ios 12.2ixaCisco Ios 12.2ixbCisco Ios 12.2ixcCisco Ios 12.2seaCisco Ios 12.2sebCisco Ios 12.2secCisco Ios 12.2sedCisco Ios 12.2svaCisco Ios 12.2svc
512
VMScore
CVE-2021-45046
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with...
Apache Log4j 2.0Apache Log4jIntel Oneapi -Intel Audio Development Kit -Intel Datacenter Manager -Intel System Debugger -Intel Secure Device Onboard -Intel Sensor Solution Firmware Development Kit -Intel Computer Vision Annotation Tool -Intel Genomics Kernel Library -Intel System Studio -Siemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85
384
VMScore
CVE-2015-1788
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1d
445
VMScore
CVE-2017-3733
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 prior to 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
Openssl Openssl 1.1.0Openssl Openssl 1.1.0cOpenssl Openssl 1.1.0dOpenssl Openssl 1.1.0aOpenssl Openssl 1.1.0bHp Operations Agent 11.15Hp Operations Agent 11.14
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook