Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unity connection 12.0 vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2019-1915
A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and Cisco Unity Connection could allo...
Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 12.5\\(1.10000.22\\)Cisco Unity Connection 12.5Cisco Unity Connection 12.0Cisco Unity Connection 11.5Cisco Unity Connection 14.0Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)
383
VMScore
CVE-2020-3282
A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenti...
Cisco Unified Communications ManagerCisco Unified Communications Manager 12.0\\(1\\)Cisco Unified Communications Manager 12.5\\(1\\)Cisco Unified Communications Manager Im And Presence ServiceCisco Unified Communications Manager Im And Presence Service 12.0\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)Cisco Unity ConnectionCisco Unity Connection 12.0\\(1\\)Cisco Unity Connection 12.5\\(1\\)
383
VMScore
CVE-2019-12707
A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability ...
Cisco Unified Communications Manager 12.5\\(1.10000.22\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager Im And Presence Service 14.0\\(1\\)Cisco Unity Connection 11.5Cisco Unity Connection 12.0Cisco Unity Connection 12.5
436
VMScore
CVE-2018-15403
A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an authenticated, remote malicious user to redirect a user to a maliciou...
Cisco Unified Communications Manager 11.0\\(1.10000.10\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unity Connection 9.1\\(1\\)es23Cisco Unified Communications Manager Im And Presence Service 10.5\\(2\\)Cisco Unified Communications Manager Im And Presence Service 10.5\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.0\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)Cisco Emergency Responder 11.5\\(4.59000.1\\)Cisco Emergency Responder 12.5\\(0.98000.110\\)Cisco Emergency Responder 12.0\\(1.40000.3\\)
356
VMScore
CVE-2021-1226
A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisc...
Cisco Unity Connection 10.5\\(2\\)Cisco Unified Communications ManagerCisco Unified Communications Manager 10.5\\(2\\)Cisco Unified Communications Manager Im \\& Presence ServiceCisco Unified Communications Manager Im \\& Presence Service 12.0\\(1\\)Cisco Unified Communications Manager Im \\& Presence Service 10.5\\(2\\)Cisco Prime License ManagerCisco Prime License Manager 10.5\\(2\\)Cisco Emergency Responder 11.5\\(1\\)Cisco Emergency Responder 12.0\\(1\\)Cisco Emergency ResponderCisco Emergency Responder 10.5\\(2\\)Cisco Unity Connection
NA
CVE-2020-3532
A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenti...
694
VMScore
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote malicious user to cause high disk utilization, resulting in a denial of service (DoS) conditio...
Cisco Emergency ResponderCisco Emergency Responder 11.0\\(1.10000.10\\)Cisco FinesseCisco Finesse 9.5\\(1\\)Cisco Hosted Collaboration Mediation FulfillmentCisco Hosted Collaboration Mediation Fulfillment 9.5\\(1\\)Cisco Mediasense 9.5\\(1\\)Cisco MediasenseCisco Prime Collaboration AssuranceCisco Prime Collaboration Provisioning 12.5Cisco Prime License ManagerCisco SocialminerCisco Unified Communications ManagerCisco Unified Communications Manager 12.0Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 11.0\\(1.10000.10\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Contact Center Express 9.0\\(2\\)su1.3Cisco Unified Contact Center ExpressCisco Unified Intelligence CenterCisco Unified Intelligence Center 9.5\\(1\\)Cisco Unity Connection 12.0
890
VMScore
CVE-2017-12337
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote malicious user to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a ...
Cisco Prime License Manager -Cisco Unity Connection -Cisco Emergency Responder -Cisco Unified Communications Manager Im And Presence Service -Cisco Unified Communications Manager -Cisco Finesse -Cisco Mediasense -Cisco Socialminer -Cisco Unified Intelligence Center -Cisco Hosted Collaboration Solution -Cisco Unified Contact Center Express -
1000
VMScore
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
1000
VMScore
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x prior to 2.3.32 and 2.5.x prior to 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote malicious users to execute arbitrary commands via a crafted Content-Typ...
Apache Struts 2.3.5Apache Struts 2.3.28Apache Struts 2.3.20.2Apache Struts 2.3.15Apache Struts 2.3.25Apache Struts 2.3.14Apache Struts 2.3.13Apache Struts 2.3.16Apache Struts 2.3.24.2Apache Struts 2.3.17Apache Struts 2.3.24.1Apache Struts 2.3.22Apache Struts 2.3.9Apache Struts 2.3.16.3Apache Struts 2.3.23Apache Struts 2.3.6Apache Struts 2.3.24.3Apache Struts 2.3.15.2Apache Struts 2.3.29Apache Struts 2.3.14.3Apache Struts 2.3.19Apache Struts 2.3.20.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook