Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unity connection 12.5 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2019-1915
A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, and Cisco Unity Connection could allo...
Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 12.5\\(1.10000.22\\)Cisco Unity Connection 12.5Cisco Unity Connection 12.0Cisco Unity Connection 11.5Cisco Unity Connection 14.0Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)
NA
CVE-2023-20266
A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote malicious user to elevate privileges ...
Cisco Unity Connection 14su3Cisco Unity Connection 12.5\\(1\\)su7Cisco Unity Connection 12.5\\(1\\)su8Cisco Unity Connection 14su2Cisco Unified Communications Manager 12.5.1su8Cisco Emergency Responder 14su3Cisco Unity Connection 12.5\\(1\\)su6Cisco Emergency Responder 12.5.1su8aCisco Emergency Responder 12.5.1su4
4
CVSSv2
CVE-2018-15396
A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote malicious user to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not r...
Cisco Unity Connection 12.5
4.3
CVSSv2
CVE-2018-0354
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validati...
Cisco Unity Connection 12.5
4.3
CVSSv2
CVE-2019-1685
A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. Th...
Cisco Unity Connection 12.5
4.3
CVSSv2
CVE-2019-12707
A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected software. The vulnerability ...
Cisco Unified Communications Manager 12.5\\(1.10000.22\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unified Communications Manager Im And Presence Service 14.0\\(1\\)Cisco Unity Connection 11.5Cisco Unity Connection 12.0Cisco Unity Connection 12.5
4.3
CVSSv2
CVE-2020-3282
A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenti...
Cisco Unified Communications ManagerCisco Unified Communications Manager 12.0\\(1\\)Cisco Unified Communications Manager 12.5\\(1\\)Cisco Unified Communications Manager Im And Presence ServiceCisco Unified Communications Manager Im And Presence Service 12.0\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)Cisco Unity ConnectionCisco Unity Connection 12.0\\(1\\)Cisco Unity Connection 12.5\\(1\\)
NA
CVE-2023-20259
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote malicious user to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This AP...
Cisco Unity Connection 14su3Cisco Emergency Responder 14su3Cisco Unified Communications Manager 14su3Cisco Unified Communications Manager Im \\& Presence Service 14su3Cisco Unified Communications Manager Im \\& Presence Service 12.5\\(1\\)su7Cisco Unified Communications Manager 12.5\\(1\\)su7Cisco Prime Collaboration Deployment 14su3
NA
CVE-2024-20253
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote malicious user to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is...
Cisco Unified Communications ManagerCisco Unified Communications Manager Im And Presence ServiceCisco Unity ConnectionCisco Unified Contact Center Express 12.5\\(1\\)Cisco Virtualized Voice Browser 12.6\\(2\\)Cisco Virtualized Voice Browser 12.6\\(1\\)Cisco Virtualized Voice Browser 12.5\\(1\\)
4.9
CVSSv2
CVE-2018-15403
A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an authenticated, remote malicious user to redirect a user to a maliciou...
Cisco Unified Communications Manager 11.0\\(1.10000.10\\)Cisco Unified Communications Manager 11.5\\(1.10000.6\\)Cisco Unified Communications Manager 12.0\\(1.10000.10\\)Cisco Unified Communications Manager 10.5\\(2.10000.5\\)Cisco Unity Connection 9.1\\(1\\)es23Cisco Unified Communications Manager Im And Presence Service 10.5\\(2\\)Cisco Unified Communications Manager Im And Presence Service 10.5\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.0\\(1\\)Cisco Unified Communications Manager Im And Presence Service 12.5\\(1\\)Cisco Emergency Responder 11.5\\(4.59000.1\\)Cisco Emergency Responder 12.5\\(0.98000.110\\)Cisco Emergency Responder 12.0\\(1.40000.3\\)
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook