Priority HIGH 76
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.57108 · Published 2008-01-17 · No fix listed CWE-119
Priority MEDIUM 54
Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitra…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08884 · Published 2007-07-15 · No fix listed
Priority MEDIUM 52
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary cod…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09569 · Published 2007-07-15 · No fix listed
Priority MEDIUM 51
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitra…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05531 · Published 2007-10-18 · No fix listed CWE-119
Priority MEDIUM 40
Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03157 · Published 2006-10-26 · No fix listed
Priority LOW 39
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02945 · Published 2009-09-28 · No fix listed
Priority LOW 39
Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0361 · Published 2006-07-14 · No fix listed
Priority LOW 38
Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel panic) via a flood of SIP INVITE messages to U…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01978 · Published 2007-10-18 · No fix listed CWE-399
Priority LOW 38
Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow remote attackers to cause a denial of service (loss of voice services) via a flood of ICMP echo requ…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01977 · Published 2007-04-03 · No fix listed
Priority LOW 38
Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allows remote attackers to cause a denial of se…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02042 · Published 2007-04-02 · No fix listed
Priority LOW 37
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cau…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.03219 · Published 2008-09-26 · No fix listed
Priority LOW 37
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cau…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0351 · Published 2008-09-26 · No fix listed
Priority LOW 36
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of servic…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01179 · Published 2008-05-16 · No fix listed CWE-20
Priority LOW 33
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key par…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01925 · Published 2008-02-14 · No fix listed CWE-89
Priority LOW 27
The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a d…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02429 · Published 2007-04-03 · No fix listed
Priority LOW 23
Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors,…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00811 · Published 2006-07-14 · No fix listed
Priority LOW 22
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01318 · Published 2015-03-28 · No fix listed CWE-200
Priority LOW 21
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01011 · Published 2006-07-14 · No fix listed