Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified provisioning manager - vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning M...
Cisco Context Directory Agent -Cisco Prime Network Control System -Cisco Prime Data Center Network Manager -Cisco Secure Access Control System -Cisco Prime Lan Management Solution -Cisco Prime Collaboration -Cisco Unified Provisioning Manager -Cisco Network Services Manager -Cisco Identity Services Engine Software -Cisco Application Networking Manager -Cisco Quad -
7.8
CVSSv2
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote malicious user to cause high disk utilization, resulting in a denial of service (DoS) conditio...
Cisco Emergency ResponderCisco Emergency Responder 11.0\\(1.10000.10\\)Cisco FinesseCisco Finesse 9.5\\(1\\)Cisco Hosted Collaboration Mediation FulfillmentCisco Hosted Collaboration Mediation Fulfillment 9.5\\(1\\)Cisco Mediasense 9.5\\(1\\)Cisco MediasenseCisco Prime Collaboration AssuranceCisco Prime Collaboration Provisioning 12.5Cisco Prime License ManagerCisco SocialminerCisco Unified Communications ManagerCisco Unified Communications Manager 12.0Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 11.0\\(1.10000.10\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Contact Center Express 9.0\\(2\\)su1.3Cisco Unified Contact Center ExpressCisco Unified Intelligence CenterCisco Unified Intelligence Center 9.5\\(1\\)Cisco Unity Connection 12.0
6.8
CVSSv2
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisio...
Cisco Identity Services Engine Software -Cisco Secure Access Control System -Cisco Application Networking Manager -Cisco Prime Network Control System -Cisco Context Directory Agent -Cisco Prime Lan Management Solution -Cisco Quad -Cisco Prime Collaboration -Cisco Unified Provisioning Manager -Cisco Network Services Manager -
7.5
CVSSv2
CVE-2015-6420
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...
Apache Commons CollectionsApache Commons Collections 4.0
2.6
CVSSv2
CVE-2016-0701
The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 prior to 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote malicious users to discover a private DH exponent by making multiple ha...
Openssl Openssl 1.0.2aOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.2Openssl Openssl 1.0.2d
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
10
CVSSv2
CVE-2009-1161
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x up to and including 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified ...
Cisco Ciscoworks Common Services 3.1Cisco Ciscoworks Common Services 3.1.1Cisco Ciscoworks Common Services 3.2Cisco Ciscoworks Common Services 3.0.3Cisco Ciscoworks Common Services 3.0.4Cisco Ciscoworks Common Services 3.0.5Cisco Ciscoworks Common Services 3.0.6Cisco Unified Service Monitor 1.1Cisco Unified Service Monitor 2.0Cisco Ciscoworks Lan Management Solution 3.1Cisco Security Manager 3.0Cisco Ciscoworks Health And Utilization Monitor 1.1Cisco Unified Operations Manager 1.0Cisco Unified Service Monitor 1.0Cisco Ciscoworks Lan Management Solution 2.6Cisco Unified Service Monitor 2.1Cisco Ciscoworks Qos Policy Manager 4.0Cisco Security Manager 3.2Cisco Security Manager 3.1Cisco Unified Operations Manager 1.1Cisco Unified Operations Manager 2.0Cisco Ciscoworks Lan Management Solution 3.0
10
CVSSv2
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...
Apache Struts 2.3.5Apache Struts 2.3.28Apache Struts 2.3.20.2Apache Struts 2.3.15Apache Struts 2.3.25Apache Struts 2.3.14Apache Struts 2.3.13Apache Struts 2.3.16Apache Struts 2.3.24.2Apache Struts 2.3.17Apache Struts 2.3.24.1Apache Struts 2.3.22Apache Struts 2.3.9Apache Struts 2.3.16.3Apache Struts 2.3.23Apache Struts 2.3.6Apache Struts 2.3.24.3Apache Struts 2.3.15.2Apache Struts 2.3.29Apache Struts 2.3.14.3Apache Struts 2.3.19Apache Struts 2.3.20.1
7.2
CVSSv2
CVE-2021-3156
Sudo prior to 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Sudo Project Sudo 1.9.5Sudo Project SudoFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Solidfire -Netapp Hci Management Node -Netapp Oncommand Unified Manager Core Package -Mcafee Web Gateway 8.2.17Mcafee Web Gateway 9.2.8Mcafee Web Gateway 10.0.4Synology Diskstation Manager 6.2Synology Diskstation Manager Unified Controller 3.0Synology Skynas Firmware -Synology Vs960hd Firmware -Beyondtrust Privilege Management For MacBeyondtrust Privilege Management For Unix\\/linuxOracle Micros Compact Workstation 3 Firmware 310Oracle Micros Es400 FirmwareOracle Micros Kitchen Display System Firmware 210Oracle Micros Workstation 5a Firmware 5a
5
CVSSv2
CVE-2014-3569
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected ...
Openssl Openssl 1.0.1j
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook