Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified communications manager vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2010-0592
The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1) allows remote attackers to cause a denial of service (service failure) via a...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.1.1Cisco Unified Communications Manager 4.1.2Cisco Unified Communications Manager 4.1.3Cisco Unified Communications Manager 4.2 2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 4.3\\(1\\)sr.1Cisco Unified Communications Manager 4.2 3sr1Cisco Unified Communications Manager 4.2.3 Sr3Cisco Unified Communications Manager 4.2 1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.3.1Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.1Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 4.2\\(3\\)sr1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2\\(3\\)sr4Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 4.3 1Cisco Unified Communications Manager 4.2\\(3\\)sr2bCisco Unified Communications Manager 4.2 3Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1.0Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 4.2\\(3\\)sr3Cisco Unified Communications Manager 4.3\\(2\\)sr1
NA
CVE-2010-0591
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the...
Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 7.1Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1.0
NA
CVE-2010-3039
/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs...
Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(3b\\)su1Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(3a\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.0\\(2a\\)su2Cisco Unified Communications Manager 7.0\\(1\\)su1aCisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.0\\(1\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su1Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 8.0
NA
CVE-2013-3434
Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242....
Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.1\\(5b\\)su1aCisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(5b\\)su6Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(5b\\)su2Cisco Unified Communications Manager 7.1\\(5b\\)su4Cisco Unified Communications Manager 7.1\\(5b\\)su5Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(5b\\)su3Cisco Unified Communications Manager 7.1\\(5b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 8.0\\(3a\\)su1Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(3a\\)su3Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 8.0\\(2\\)Cisco Unified Communications Manager 8.0\\(3a\\)su2Cisco Unified Communications Manager 8.0Cisco Unified Communications Manager 8.0\\(2a\\)Cisco Unified Communications Manager 8.0\\(3a\\)Cisco Unified Communications Manager 8.0\\(1\\)Cisco Unified Communications Manager 8.0\\(2b\\)Cisco Unified Communications Manager 8.5\\(1\\)Cisco Unified Communications Manager 8.5Cisco Unified Communications Manager 8.5\\(1\\)su3Cisco Unified Communications Manager 8.5\\(1\\)su1Cisco Unified Communications Manager 8.5\\(1\\)su4Cisco Unified Communications Manager 8.5\\(1\\)su5Cisco Unified Communications Manager 8.5\\(1\\)su2Cisco Unified Communications Manager 8.6\\(2a\\)Cisco Unified Communications Manager 8.6\\(2a\\)su1Cisco Unified Communications Manager 8.6\\(1a\\)Cisco Unified Communications Manager 8.6\\(2\\)Cisco Unified Communications Manager 8.6\\(2a\\)su3Cisco Unified Communications Manager 8.6\\(4\\)Cisco Unified Communications Manager 8.6\\(2a\\)su2Cisco Unified Communications Manager 8.6\\(1\\)Cisco Unified Communications Manager 8.6Cisco Unified Communications Manager 8.6\\(3\\)Cisco Unified Communications Manager 9.0\\(1\\)Cisco Unified Communications Manager 9.1\\(1\\)Cisco Unified Communications Manager 9.1.1\\(a\\)
NA
CVE-2011-1607
Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a...
Cisco Unified Communications Manager 6.1\\(4a\\)Cisco Unified Communications Manager 6.1\\(3a\\)Cisco Unified Communications Manager 6.1\\(4\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)su1Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1\\(3b\\)Cisco Unified Communications Manager 6.1\\(5\\)Cisco Unified Communications Manager 6.1\\(5\\)su1Cisco Unified Communications Manager 6.1\\(2\\)su1aCisco Unified Communications Manager 6.1\\(1b\\)Cisco Unified Communications Manager 6.1\\(1a\\)Cisco Unified Communications Manager 6.1\\(3\\)Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 6.1\\(3b\\)su1Cisco Unified Communications Manager 6.1\\(4\\)su1Cisco Unified Communications Manager 6.1\\(4a\\)su2Cisco Unified Communications Manager 7.1\\(3\\)Cisco Unified Communications Manager 7.1\\(5\\)Cisco Unified Communications Manager 7.0\\(2\\)Cisco Unified Communications Manager 7.0\\(1\\)su1Cisco Unified Communications Manager 7.1\\(2b\\)Cisco Unified Communications Manager 7.1\\(2b\\)su1Cisco Unified Communications Manager 7.1\\(3b\\)su2Cisco Unified Communications Manager 7.1\\(3b\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su1Cisco Unified Communications Manager 7.0\\(2a\\)su2Cisco Unified Communications Manager 7.1\\(5b\\)su2Cisco Unified Communications Manager 7.1\\(3a\\)su1Cisco Unified Communications Manager 7.1\\(3a\\)su1aCisco Unified Communications Manager 7.1\\(5\\)su1aCisco Unified Communications Manager 7.0\\(1\\)su1aCisco Unified Communications Manager 7.0\\(2a\\)Cisco Unified Communications Manager 7.1\\(3b\\)Cisco Unified Communications Manager 7.1\\(3a\\)Cisco Unified Communications Manager 7.1\\(5\\)su1Cisco Unified Communications Manager 7.1\\(5b\\)Cisco Unified Communications Manager 7.1\\(5a\\)Cisco Unified Communications Manager 7.1\\(2a\\)Cisco Unified Communications Manager 7.1\\(2a\\)su1Cisco Unified Communications Manager 8.5Cisco Unified Communications Manager 8.0\\(3\\)Cisco Unified Communications Manager 8.0\\(2c\\)su1Cisco Unified Communications Manager 8.0\\(2c\\)Cisco Unified Communications Manager 8.0\\(3a\\)
NA
CVE-2008-1746
The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.0
NA
CVE-2008-1745
Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115....
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 6.0
NA
CVE-2009-0057
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the...
Cisco Unified Communications Manager 5.0 4Cisco Unified Communications Manager 5.0 3aCisco Unified Communications Manager 5.1.2Cisco Unified Communications Manager 5.1Cisco Unified Communications Manager 5.1 3aCisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.0Cisco Unified Communications Manager 5.0 4aCisco Unified Communications Manager 5.0 4a Su1Cisco Unified Communications Manager 5.0 2Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 5.1 1Cisco Unified Communications Manager 5.0Cisco Unified Communications Manager 5.0 1Cisco Unified Communications Manager 5.1 2bCisco Unified Communications Manager 5.1 2aCisco Unified Communications Manager 6.0 1Cisco Unified Communications Manager 6.0 1aCisco Unified Communications Manager 6.1.0Cisco Unified Communications Manager 5.0 3Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1 2Cisco Unified Communications Manager 5.1 \\(2a\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 6.1 1a
NA
CVE-2014-0733
The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a URL, aka Bug ID CSCum46494....
Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications ManagerCisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.3sr2b
NA
CVE-2014-0742
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464....
Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 10.0Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3sr1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49378log injectionlocalCVE-2023-49105CVE-2023-42577CVE-2023-5970CVE-2023-45124CVE-2023-43608race condition
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook