Cisco

Unified Presence

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2013-3453

  • EPSS 0.43%
  • Published 22.08.2013 22:55:05
  • Last modified 11.04.2025 00:51:21

Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service (memory and CPU consumption) by making many TCP conne...

6.8

CVE-2013-1197

  • EPSS 0.36%
  • Published 16.04.2013 14:04:30
  • Last modified 11.04.2025 00:51:21

The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon crash) via crafted XML content in an XMPP message, aka Bug ID CSCue13912.

7.8

CVE-2012-3935

  • EPSS 0.8%
  • Published 12.09.2012 23:55:00
  • Last modified 11.04.2025 00:51:21

Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.

7.8

CVE-2011-3288

  • EPSS 0.53%
  • Published 06.10.2011 10:55:05
  • Last modified 11.04.2025 00:51:21

Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large ...

7.8

CVE-2008-1158

  • EPSS 1.92%
  • Published 16.05.2008 12:54:00
  • Last modified 09.04.2025 00:30:58

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164.

7.8

CVE-2008-1740

  • EPSS 1.92%
  • Published 16.05.2008 12:54:00
  • Last modified 09.04.2025 00:30:58

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.

7.8

CVE-2008-1741

  • EPSS 1.92%
  • Published 16.05.2008 12:54:00
  • Last modified 09.04.2025 00:30:58

The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID CSCsj64533.

10

CVE-2008-1154

  • EPSS 5.57%
  • Published 04.04.2008 19:44:00
  • Last modified 09.04.2025 00:30:58

The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not requi...