Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified operations manager - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-0960
Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) prior to 8.6 allow remote malicious users to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug...
Cisco Unified Operations Manager 2.2Cisco Unified Operations Manager 2.0Cisco Unified Operations Manager 2.0.1Cisco Unified Operations ManagerCisco Unified Operations Manager 2.0.2Cisco Unified Operations Manager 1.1Cisco Unified Operations Manager 2.3Cisco Unified Operations Manager 2.1Cisco Unified Operations Manager 8.0Cisco Unified Operations Manager 2.0.3
NA
CVE-2011-0959
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) prior to 8.6 allow remote malicious users to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do,...
Cisco Unified Operations Manager 2.2Cisco Unified Operations Manager 2.0Cisco Unified Operations Manager 2.0.1Cisco Unified Operations ManagerCisco Unified Operations Manager 2.0.2Cisco Unified Operations Manager 1.1Cisco Unified Operations Manager 2.3Cisco Unified Operations Manager 2.1Cisco Unified Operations Manager 8.0Cisco Unified Operations Manager 2.0.3
NA
CVE-2011-0962
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) prior to 8.6 allows remote malicious users to inject arbitrary web script or HTML via the tag parameter, a...
Cisco Unified Operations Manager 2.2Cisco Unified Operations Manager 2.0Cisco Unified Operations Manager 2.0.1Cisco Unified Operations ManagerCisco Unified Operations Manager 2.0.2Cisco Unified Operations Manager 1.1Cisco Unified Operations Manager 2.3Cisco Unified Operations Manager 2.1Cisco Unified Operations Manager 8.0Cisco Unified Operations Manager 2.0.3
NA
CVE-2013-3416
Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter,...
Cisco Unified Operations Manager -Cisco Unified Service Monitor -
NA
CVE-2013-3439
Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote malicious users to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.
Cisco Unified Operations Manager -
NA
CVE-2013-3437
SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.
Cisco Unified Operations Manager -
NA
CVE-2013-3440
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote malicious users to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.
Cisco Unified Operations Manager -
NA
CVE-2013-5488
Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote malicious users to cause a denial ...
Cisco Unified Operations Manager -Cisco Prime Lan Management Solution -Cisco Unified Service Monitor -Cisco Security Manager
NA
CVE-2014-0747
The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to inject commands via unspecified CAPF programs, aka Bug ID CSCum95493.
Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications ManagerCisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.3
7.5
CVSSv3
CVE-2023-20259
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote malicious user to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This AP...
Cisco Unity Connection 14su3Cisco Emergency Responder 14su3Cisco Unified Communications Manager 14su3Cisco Unified Communications Manager Im \\& Presence Service 14su3Cisco Unified Communications Manager Im \\& Presence Service 12.5\\(1\\)su7Cisco Unified Communications Manager 12.5\\(1\\)su7Cisco Prime Collaboration Deployment 14su3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook