Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unity connection - vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2012-0367
Cisco Unity Connection prior to 7.1.5b(Su5), 8.0 and 8.5 prior to 8.5.1(Su3), and 8.6 prior to 8.6.2 allows remote malicious users to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899.
Cisco Unity Connection 7.1\\(5\\)su1aCisco Unity Connection 7.1\\(5b\\)su2Cisco Unity Connection 7.1\\(5b\\)su3Cisco Unity Connection 7.1\\(3b\\)su2Cisco Unity Connection 7.1\\(5\\)Cisco Unity Connection 7.1\\(3a\\)su1Cisco Unity Connection 7.1\\(3b\\)Cisco Unity ConnectionCisco Unity Connection 7.0Cisco Unity Connection 2.1\\(4a\\)Cisco Unity Connection 2.1\\(5\\)Cisco Unity Connection 2.1\\(4a\\)su2Cisco Unity Connection 2.1\\(3b\\)su1Cisco Unity Connection 8.0Cisco Unity Connection 8.0\\(3a\\)su3Cisco Unity Connection 8.0\\(3a\\)su1Cisco Unity Connection 8.0\\(3a\\)su2Cisco Unity Connection 7.1\\(2\\)Cisco Unity Connection 7.1Cisco Unity Connection 7.1\\(3a\\)Cisco Unity Connection 7.1\\(3\\)Cisco Unity Connection 2.1\\(1\\)
9
CVSSv2
CVE-2012-0366
Cisco Unity Connection prior to 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Cisco Unity Connection 7.1\\(3a\\)su1Cisco Unity Connection 7.1\\(3a\\)su1aCisco Unity Connection 7.1\\(5\\)Cisco Unity Connection 7.1\\(5a\\)Cisco Unity Connection 7.1\\(5b\\)Cisco Unity Connection 2.1\\(3\\)Cisco Unity Connection 2.1\\(4\\)Cisco Unity Connection 2.1\\(5\\)Cisco Unity Connection 2.1\\(4a\\)Cisco Unity Connection 1.1\\(1\\)Cisco Unity Connection 1.1\\(1\\) Es1Cisco Unity Connection 1.1\\(1\\) Es12Cisco Unity Connection 1.1\\(1\\) Sr1Cisco Unity Connection 7.1\\(2\\)Cisco Unity Connection 7.1\\(2b\\)Cisco Unity Connection 7.1\\(2b\\)su1Cisco Unity Connection 7.1\\(2a\\)Cisco Unity Connection 7.0Cisco Unity Connection 7.0\\(2\\)Cisco Unity Connection 7.0\\(2a\\)su2Cisco Unity Connection 7.0\\(2a\\)su3Cisco Unity Connection 2.1\\(3b\\)su1
7.1
CVSSv2
CVE-2015-0614
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 prior to 8.5(1)SU7, 8.6 prior to 8.6(2a)SU4, 9.x prior to 9.1(2)SU2, and 10.0 prior to 10.0(1)SU1, when SIP trunk integration is enabled, allows remote malicious users to cause a denial of ser...
Cisco Unity Connection 8.6\\(2a\\)su2Cisco Unity Connection 8.6\\(2a\\)su3Cisco Unity Connection 8.5\\(1\\)Cisco Unity Connection 8.5\\(1\\)su1Cisco Unity Connection 9.0\\(1\\)Cisco Unity Connection 9.1\\(1\\)Cisco Unity Connection 9.1\\(2\\)Cisco Unity Connection 8.6\\(1\\)Cisco Unity Connection 10.0.5Cisco Unity Connection 10.0.0Cisco Unity Connection 8.5 BaseCisco Unity Connection 8.6\\(2\\)Cisco Unity Connection 8.6\\(2a\\)su1Cisco Unity Connection 8.5\\(1\\)su2Cisco Unity Connection 8.5\\(1\\)su4Cisco Unity Connection 8.5\\(1\\)su6Cisco Unity Connection 8.6 BaseCisco Unity Connection 8.6\\(1a\\)Cisco Unity Connection 8.6\\(2a\\)Cisco Unity Connection 8.5\\(1\\)su3Cisco Unity Connection 8.5\\(1\\)su5
7.1
CVSSv2
CVE-2015-0615
The call-handling implementation in Cisco Unity Connection 8.5 prior to 8.5(1)SU7, 8.6 prior to 8.6(2a)SU4, 9.x prior to 9.1(2)SU2, and 10.0 prior to 10.0(1)SU1, when SIP trunk integration is enabled, allows remote malicious users to cause a denial of service (port consumption) b...
Cisco Unity Connection 8.6\\(2\\)Cisco Unity Connection 8.5 BaseCisco Unity Connection 8.6 BaseCisco Unity Connection 9.0\\(1\\)Cisco Unity Connection 8.5\\(1\\)su4Cisco Unity Connection 8.5\\(1\\)su5Cisco Unity Connection 8.5\\(1\\)su6Cisco Unity Connection 10.0.5Cisco Unity Connection 8.6\\(2a\\)Cisco Unity Connection 8.6\\(2a\\)su1Cisco Unity Connection 8.6\\(2a\\)su2Cisco Unity Connection 9.1\\(2\\)Cisco Unity Connection 8.6\\(1a\\)Cisco Unity Connection 8.6\\(2a\\)su3Cisco Unity Connection 8.5\\(1\\)su1Cisco Unity Connection 8.5\\(1\\)su3Cisco Unity Connection 10.0.0Cisco Unity Connection 9.1\\(1\\)Cisco Unity Connection 8.6\\(1\\)Cisco Unity Connection 8.5\\(1\\)Cisco Unity Connection 8.5\\(1\\)su2
7.1
CVSSv2
CVE-2015-0613
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 prior to 8.5(1)SU7, 8.6 prior to 8.6(2a)SU4, 9.x prior to 9.1(2)SU2, and 10.0 prior to 10.0(1)SU1, when SIP trunk integration is enabled, allows remote malicious users to cause a denial of ser...
Cisco Unity Connection 8.6\\(1\\)Cisco Unity Connection 8.6\\(1a\\)Cisco Unity Connection 8.6\\(2\\)Cisco Unity Connection 8.6\\(2a\\)Cisco Unity Connection 8.6 BaseCisco Unity Connection 8.5\\(1\\)su1Cisco Unity Connection 8.5\\(1\\)su2Cisco Unity Connection 8.5\\(1\\)su3Cisco Unity Connection 8.5\\(1\\)su4Cisco Unity Connection 8.5\\(1\\)su5Cisco Unity Connection 8.5 BaseCisco Unity Connection 9.1\\(1\\)Cisco Unity Connection 8.6\\(2a\\)su2Cisco Unity Connection 8.5\\(1\\)Cisco Unity Connection 10.0.5Cisco Unity Connection 9.0\\(1\\)Cisco Unity Connection 9.1\\(2\\)Cisco Unity Connection 8.6\\(2a\\)su1Cisco Unity Connection 8.6\\(2a\\)su3Cisco Unity Connection 8.5\\(1\\)su6Cisco Unity Connection 10.0.0
7.1
CVSSv2
CVE-2015-0616
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 prior to 8.5(1)SU7, 8.6 prior to 8.6(2a)SU4, and 9.x prior to 9.1(2)SU2, when SIP trunk integration is enabled, allows remote malicious users to cause a denial of service (core dump and restar...
Cisco Unity Connection 8.6\\(2a\\)su3Cisco Unity Connection 8.5\\(1\\)Cisco Unity Connection 8.5\\(1\\)su1Cisco Unity Connection 8.5\\(1\\)su2Cisco Unity Connection 9.0\\(1\\)Cisco Unity Connection 9.1\\(1\\)Cisco Unity Connection 9.1\\(2\\)Cisco Unity Connection 8.6\\(1\\)Cisco Unity Connection 8.5 BaseCisco Unity Connection 8.6\\(1a\\)Cisco Unity Connection 8.6\\(2a\\)Cisco Unity Connection 8.6\\(2a\\)su2Cisco Unity Connection 8.5\\(1\\)su3Cisco Unity Connection 8.5\\(1\\)su5Cisco Unity Connection 8.6 BaseCisco Unity Connection 8.6\\(2\\)Cisco Unity Connection 8.6\\(2a\\)su1Cisco Unity Connection 8.5\\(1\\)su4Cisco Unity Connection 8.5\\(1\\)su6
7.1
CVSSv2
CVE-2015-0612
The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 prior to 8.5(1)SU6, 8.6 prior to 8.6(2a)SU4, and 9.x prior to 9.1(2)SU2, when SIP trunk integration is enabled, allows remote malicious users to cause a denial of service (SIP outage) via a cr...
Cisco Unity Connection 8.5 BaseCisco Unity Connection 8.6 BaseCisco Unity Connection 9.0\\(1\\)Cisco Unity Connection 9.1\\(1\\)Cisco Unity Connection 8.5\\(1\\)su4Cisco Unity Connection 8.5\\(1\\)su5Cisco Unity Connection 8.6\\(2a\\)Cisco Unity Connection 8.6\\(2a\\)su1Cisco Unity Connection 8.6\\(2a\\)su2Cisco Unity Connection 8.6\\(2a\\)su3Cisco Unity Connection 9.1\\(2\\)Cisco Unity Connection 8.6\\(1a\\)Cisco Unity Connection 8.5\\(1\\)su1Cisco Unity Connection 8.5\\(1\\)su3Cisco Unity Connection 8.6\\(1\\)Cisco Unity Connection 8.6\\(2\\)Cisco Unity Connection 8.5\\(1\\)Cisco Unity Connection 8.5\\(1\\)su2
4.3
CVSSv2
CVE-2016-1377
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection up to and including 11.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.
Cisco Unity Connection 11.0\\(0.98000.225\\)Cisco Unity Connection 11.0.0Cisco Unity Connection 10.5\\(2\\)Cisco Unity Connection 10.5\\(2.3009\\)Cisco Unity Connection 10.0.5Cisco Unity Connection 10.0.0
5
CVSSv2
CVE-2013-1129
Memory leak in Cisco Unity Connection 9.x allows remote malicious users to cause a denial of service (memory consumption and process crash) by sending many TCP requests, aka Bug ID CSCud59736.
Cisco Unity Connection 9.1.1Cisco Unity Connection 9.0Cisco Unity Connection 9.1Cisco Unity Connection 9.5
7.8
CVSSv2
CVE-2012-3060
Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote malicious users to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269.
Cisco Unity Connection 9.5Cisco Unity Connection 8.6Cisco Unity Connection 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook