Cisco

Unified Communications Manager

204 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2013-6689

  • EPSS 0.06%
  • Veröffentlicht 18.11.2013 03:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229.

4.3

CVE-2013-5555

  • EPSS 0.44%
  • Veröffentlicht 01.11.2013 02:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a crafted SIP message, aka Bug ID CSCub54349.

4

CVE-2013-5528

Exploit
  • EPSS 61.5%
  • Veröffentlicht 11.10.2013 03:54:53
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug I...

6.8

CVE-2013-3472

  • EPSS 0.11%
  • Veröffentlicht 29.08.2013 12:07:54
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka...

7.8

CVE-2013-3460

  • EPSS 0.55%
  • Veröffentlicht 25.08.2013 03:27:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remote attackers to cause a denial of service (service disruption) via a high rate of UDP packets, aka Bu...

7.1

CVE-2013-3461

  • EPSS 0.51%
  • Veröffentlicht 25.08.2013 03:27:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, an...

8.5

CVE-2013-3462

  • EPSS 8.76%
  • Veröffentlicht 25.08.2013 03:27:32
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vector...

7.8

CVE-2013-3453

  • EPSS 0.43%
  • Veröffentlicht 22.08.2013 22:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service (memory and CPU consumption) by making many TCP conne...

4

CVE-2013-3442

  • EPSS 0.16%
  • Veröffentlicht 05.08.2013 13:22:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854.

6.8

CVE-2013-3450

  • EPSS 0.12%
  • Veröffentlicht 05.08.2013 13:22:47
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui1302...