Priority CRITICAL 100KEV
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unif…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04541 · Published 2026-01-21 · No fix listed CWE-94
Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 53
A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02399 · Published 2024-01-26 · No fix listed CWE-502
Priority MEDIUM 51
A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence (Unified CM IM&P) Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series co…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.04639 · Published 2019-06-05 · Fixed in 12.5(1) CWE-20
Priority MEDIUM 51
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access t…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06435 · Published 2017-11-16 · No fix listed CWE-287
Priority MEDIUM 45
A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway could allow an unauthenti…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03446 · Published 2018-08-15 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00847 · Published 2018-06-21 · No fix listed CWE-352
Priority MEDIUM 41
A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity Connection co…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01299 · Published 2022-07-06 · No fix listed CWE-284
Priority LOW 38
A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restrict…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03122 · Published 2016-12-14 · No fix listed CWE-200
Priority LOW 38
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process res…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02868 · Published 2016-08-08 · No fix listed CWE-399
Priority LOW 37
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to conduct SQL injection attacks…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00841 · Published 2022-04-21 · No fix listed CWE-89
Priority LOW 37
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01081 · Published 2021-05-06 · No fix listed CWE-89
Priority LOW 37
Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affect…
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01081 · Published 2021-05-06 · No fix listed CWE-89
Priority LOW 35
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to cause a temporary service o…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00933 · Published 2023-06-28 · No fix listed CWE-789
Priority LOW 33
SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01979 · Published 2015-06-26 · No fix listed CWE-89
Priority LOW 32
A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Man…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01515 · Published 2022-07-06 · No fix listed CWE-36
Priority LOW 32
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01357 · Published 2021-01-20 · No fix listed CWE-35
Priority LOW 32
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01368 · Published 2021-01-20 · No fix listed CWE-35
Priority LOW 32
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01368 · Published 2021-01-20 · No fix listed CWE-35
Priority LOW 32
Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01357 · Published 2021-01-20 · No fix listed CWE-35
Priority LOW 31
A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00188 · Published 2025-06-04 · No fix listed CWE-77
Priority LOW 31
A vulnerability in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01164 · Published 2020-11-06 · No fix listed CWE-248
Priority LOW 31
A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the u…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0178 · Published 2018-07-18 · No fix listed CWE-79
Priority LOW 30
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack ag…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00498 · Published 2024-04-03 · No fix listed CWE-23
Priority LOW 30
A vulnerability in the web-based interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM and Presence (Unified CM…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00671 · Published 2019-10-02 · No fix listed CWE-352
Load more