cisco unified presence 6.0 1 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

The Presence Engine (PE) service in Cisco Unified Presence prior to 6.0(1) allows remote malicious users to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164.

Cisco Unified Presence 6.0 Cisco Unified Presence Server 1.0 Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Presence Server 1.0\\(2\\)

7.8

CVSSv2

The Presence Engine (PE) service in Cisco Unified Presence 6.x prior to 6.0(7) and 7.x prior to 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote malicious users to cause a denial of service (process failure) ...

Cisco Unified Presence Server 6.0\\(2\\)Cisco Unified Presence Server 6.0\\(3\\)Cisco Unified Presence Server 7.0\\(4\\)Cisco Unified Presence Server 7.0\\(5\\)Cisco Unified Presence Server 7.0\\(2\\)Cisco Unified Presence Server 7.0\\(3\\)Cisco Unified Presence Server 6.0\\(4\\)Cisco Unified Presence Server 6.0\\(5\\)Cisco Unified Presence Server 7.0\\(6\\)Cisco Unified Presence Server 7.0\\(7\\)Cisco Unified Presence Server 6.0\\(6\\)Cisco Unified Presence Server 7.0 Cisco Unified Presence Server 6.0 Cisco Unified Presence Server 6.0\\(4.1101-5\\)Cisco Unified Presence Server 6.0\\(5.1101-1\\)Cisco Unified Presence Server 6.0\\(2.1101\\)Cisco Unified Presence Server 6.0\\(3.1101-2\\)Cisco Unified Presence Server 6.0.5.1102-1 Cisco Unified Presence Server 6.0\\(5.1103-2\\)Cisco Unified Presence Server 7.0.3.10103-2 Cisco Unified Presence Server 7.0.3.10102-3 Cisco Unified Presence Server 7.0.4.10101-2

7.8

CVSSv2

SIPD in Cisco Unified Presence 6.x prior to 6.0(7) and 7.x prior to 7.0(8) allows remote malicious users to cause a denial of service (stack memory corruption and process failure) via a malformed SIP message, aka Bug ID CSCtd14474.

Cisco Unified Presence Server 6.0\\(2\\)Cisco Unified Presence Server 6.0\\(3\\)Cisco Unified Presence Server 7.0\\(4\\)Cisco Unified Presence Server 7.0\\(5\\)Cisco Unified Presence Server 7.0\\(2\\)Cisco Unified Presence Server 7.0\\(3\\)Cisco Unified Presence Server 6.0\\(4\\)Cisco Unified Presence Server 6.0\\(5\\)Cisco Unified Presence Server 7.0\\(6\\)Cisco Unified Presence Server 7.0\\(7\\)Cisco Unified Presence Server 6.0\\(6\\)Cisco Unified Presence Server 7.0 Cisco Unified Presence Server 6.0 Cisco Unified Presence Server 6.0\\(4.1101-5\\)Cisco Unified Presence Server 6.0\\(5.1101-1\\)Cisco Unified Presence Server 6.0.5.1102-1 Cisco Unified Presence Server 6.0\\(2.1101\\)Cisco Unified Presence Server 6.0\\(3.1101-2\\)Cisco Unified Presence Server 6.0\\(5.1103-2\\)Cisco Unified Presence Server 7.0.3.10103-2 Cisco Unified Presence Server 7.0.3.10102-3 Cisco Unified Presence Server 7.0.4.10101-2

7.8

CVSSv2

The TimesTenD process in Cisco Unified Presence 1.x, 6.x prior to 6.0(6), and 7.x prior to 7.0(4) allows remote malicious users to cause a denial of service (process crash) via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662.

Cisco Unified Presence Server 6.0\\(2\\)Cisco Unified Presence Server 6.0\\(3\\)Cisco Unified Presence Server 1.0\\(2\\)Cisco Unified Presence Server 1.0\\(3\\)Cisco Unified Presence Server 7.0\\(2\\)Cisco Unified Presence Server 7.0\\(3\\)Cisco Unified Presence Server 1.0 Cisco Unified Presence Server 1.0\\(1\\)Cisco Unified Presence Server 6.0\\(4\\)Cisco Unified Presence Server 6.0\\(5\\)Cisco Unified Presence Server 6.0 Cisco Unified Presence Server 7.0

7.8

CVSSv2

Cisco Unified Presence (CUP) prior to 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) prior to 5.3 allow remote malicious users to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.

10

CVSSv2

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x prior to 7.1(5b)su4, 8.0, and 8.5 prior to 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 prior to 8.5xnr allow remote malicious users to read database data by connecting to a query...

Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1 Cisco Unified Communications Manager 7.0\\(2a\\)su1 Cisco Unified Communications Manager 7.0\\(2a\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 6.1\\(5\\)su1 Cisco Unified Communications Manager 6.1\\(5\\)su2 Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.1\\(3b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3b\\)su2 Cisco Unified Communications Manager 7.1\\(3b\\)su1 Cisco Unified Communications Manager 7.1\\(2b\\)

10

CVSSv2

The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests...

Cisco Unified Presence 1.0 Cisco Unified Presence 6.0 Cisco Mobility Manager 2.0 Cisco Unified Communications Manager 5.0 Cisco Unified Communications Manager 5.1 Cisco Emergency Responder 2.0 Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.1

7.8

CVSSv2

The Presence Engine (PE) service in Cisco Unified Presence prior to 6.0(1) allows remote malicious users to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.

Cisco Unified Presence 6.0 1 Cisco Unified Presence

7.8

CVSSv2

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x prior to 5.1(3g), 6.x prior to 6.1(4), 7.0 prior to 7.0(2), and 7.1 prior to 7.1(2); and Cisco Unified Presence 1.x, 6.x prior to 6.0(6), and 7.x prior to 7.0(4); allows remote malicious users to cause...

Cisco Unified Communications Manager

7.8

CVSSv2

Memory leak in Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), and Cisco Unified Presence, allows remote malicious users to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5...

Cisco Unified Communications Manager 8.5\\(1\\)su3 Cisco Unified Communications Manager 8.5\\(1\\)su2 Cisco Unified Communications Manager 8.5\\(1\\)su1 Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.0 Cisco Unified Communications Manager 7.1\\(5b\\)su6 Cisco Unified Communications Manager 7.1\\(5b\\)su5 Cisco Unified Communications Manager 7.1\\(5b\\)su4 Cisco Unified Communications Manager 7.1\\(5b\\)su3 Cisco Unified Communications Manager 7.1\\(3a\\)su1 Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1 Cisco Unified Communications Manager 6.1\\(4a\\)su2 Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4\\)su1 Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 5.1.2 Cisco Unified Communications Manager 5.1\\(3e\\)Cisco Unified Communications Manager 5.1\\(3d\\)

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook