Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified communications manager express vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2011-3315
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x prior to 6.1(5)SU2, 7.x prior to 7.1(5b)SU2, and 8.x prior to 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (U...
Cisco Unified Ip Interactive Voice Response -Cisco Unified Ip Ivr 7.0\\(1\\)Cisco Unified Ip Ivr 7.0\\(2\\)Cisco Unified Ip Ivr 8.0\\(1\\)Cisco Unified Ip Ivr 8.5\\(1\\)Cisco Unified Ip Ivr 6.0\\(1\\)Cisco Unified Ip Ivr 8.0\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(1\\)
5
CVSSv2
CVE-2016-1319
Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext...
Cisco Unified Communications Manager Im And Presence Service 10.5\\\\\\(2\\\\\\)Cisco Unified Contact Center Express 11.0\\\\\\(1\\\\\\)Cisco Unified Communications Manager 9.1\\\\\\(2.10000.28\\\\\\)Cisco Unified Communications Manager 10.5\\\\\\(2.10000.5\\\\\\)Cisco Unified Communications Manager 10.5\\\\\\(2.12901.1\\\\\\)Cisco Unified Communications Manager 11.0\\\\\\(1.10000.10\\\\\\)Cisco Unity Connection 10.5\\\\\\(2\\\\\\)
NA
CVE-2024-20253
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote malicious user to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is...
Cisco Unified Communications ManagerCisco Unified Communications Manager Im And Presence ServiceCisco Unity ConnectionCisco Unified Contact Center Express 12.5\\(1\\)Cisco Virtualized Voice Browser 12.6\\(2\\)Cisco Virtualized Voice Browser 12.6\\(1\\)Cisco Virtualized Voice Browser 12.5\\(1\\)
4.3
CVSSv2
CVE-2016-1354
Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x prior to 8.1.1 allows remote malicious users to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176.
Cisco Unified Communications Domain Manager 8.0.2Cisco Unified Communications Domain Manager 8.0.1Cisco Unified Communications Domain Manager 8.0
7.8
CVSSv2
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote malicious user to cause high disk utilization, resulting in a denial of service (DoS) conditio...
Cisco Emergency ResponderCisco Emergency Responder 11.0\\(1.10000.10\\)Cisco FinesseCisco Finesse 9.5\\(1\\)Cisco Hosted Collaboration Mediation FulfillmentCisco Hosted Collaboration Mediation Fulfillment 9.5\\(1\\)Cisco Mediasense 9.5\\(1\\)Cisco MediasenseCisco Prime Collaboration AssuranceCisco Prime Collaboration Provisioning 12.5Cisco Prime License ManagerCisco SocialminerCisco Unified Communications ManagerCisco Unified Communications Manager 12.0Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 11.0\\(1.10000.10\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Contact Center Express 9.0\\(2\\)su1.3Cisco Unified Contact Center ExpressCisco Unified Intelligence CenterCisco Unified Intelligence Center 9.5\\(1\\)Cisco Unity Connection 12.0
5
CVSSv2
CVE-2020-3177
A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote malicious user to conduct directory traversal attac...
Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 12.5\\(1.10000.22\\)Cisco Unified Contact Center Express 12.0\\(1\\)
7.8
CVSSv2
CVE-2010-2834
Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.1, Cisco IOS XE 2.5.x and 2.6.x prior to 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x prior to 6.1(5)SU1, 7.x prior to 7.1(5), and 8.0 prior to 8.0(2) allow remote mali...
Cisco Ios 12.1xjCisco Ios 12.1xlCisco Ios 12.1xmCisco Ios 12.1xpCisco Ios 12.1yfCisco Ios 12.1yhCisco Ios 12.1yiCisco Ios 12.2bCisco Ios 12.2ixbCisco Ios 12.2ixcCisco Ios 12.2ixdCisco Ios 12.2ixeCisco Ios 12.2sreCisco Ios 12.2suCisco Ios 12.2svCisco Ios 12.2sxaCisco Ios 12.2xgCisco Ios 12.2xhCisco Ios 12.2xiCisco Ios 12.2xjCisco Ios 12.2xkCisco Ios 12.1
7.8
CVSSv2
CVE-2010-2835
Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.1, Cisco IOS XE 2.5.x and 2.6.x prior to 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x prior to 6.1(5), 7.0 prior to 7.0(2a)su3, 7.1su prior to 7.1(3b)su2, 7.1 prior to ...
Cisco Ios 12.1xmCisco Ios 12.1xqCisco Ios 12.1xvCisco Ios 12.1ybCisco Ios 12.2bCisco Ios 12.2bxCisco Ios 12.2irbCisco Ios 12.2irdCisco Ios 12.2ixdCisco Ios 12.2ixfCisco Ios 12.2scbCisco Ios 12.2scdCisco Ios 12.2sxaCisco Ios 12.2sxdCisco Ios 12.2tCisco Ios 12.2xaCisco Ios 12.2xjCisco Ios 12.2xlCisco Ios 12.2xvCisco Ios 12.2yaCisco Ios 12.2yfCisco Ios 12.2yj
7.8
CVSSv2
CVE-2012-3949
The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x prior to 7.1(5b)su5, 8.x prior to 8.5(1)su4, and 8.6 prior to 8.6(2a)su1; Cisco IOS 12.2 up to and including 12.4 and 15.0 up to and including 15.2; and Cisco IOS XE 3.3.xSG prior to 3.3.1SG, 3.4.xS...
Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(4b\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 8.0\\(1\\)Cisco Ios 12.2byCisco Ios 12.2bzCisco Ios 12.2caCisco Ios 12.2cxCisco Ios 12.2irbCisco Ios 12.2ixaCisco Ios 12.2ixbCisco Ios 12.2ixcCisco Ios 12.2seaCisco Ios 12.2sebCisco Ios 12.2secCisco Ios 12.2sedCisco Ios 12.2svaCisco Ios 12.2svc
7.6
CVSSv2
CVE-2009-2865
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote malicious users to execute arbitrary code or cause a denial of service via cra...
Cisco Unified Communications Manager ExpressCisco Ios 12.4xwCisco Ios 12.4xyCisco Ios 12.4yaCisco Ios 12.4xz
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook