Read the docs
TI-2017-04428 Aliases CVE-2017-6670GHSA-r3wx-q354-fc7x

Open redirect in Cisco Unified Communications Domain Manager

Priority LOW 30CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-601.

Summary

A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.

Why it matters now

EPSS 0.01201 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Unified Communications Domain ManagerCisco Unified Communications Domain Manager—No fix listedCNA
  • Cisco Unified Communications Domain Manager Vendor— Affected Cisco Unified Communications Domain Manager Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\(7\)er1:*:*:*:*:*:*:*8.1(7)er1VulnerableCisco
  • cpe:2.3:a:cisco:unified_communications_domain_manager:8.1\(7\)er1:*:*:*:*:*:*:* Versions 8.1(7)er1 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6670
  2. 2026-10-03 Alias added: GHSA-r3wx-q354-fc7x

References

Advisory 1

  • TI-2018-00099 A vulnerability in Cisco Unified Communications Domain Manager could allow an… CVSS 3.0CRITICAL 9.8
  • TI-2014-02635 The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager… CVSS 2.0HIGH 7.5
  • TI-2014-01741 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before… CVSS 2.0HIGH 10.0
  • TI-2014-01740 The Administration GUI in the web framework in Cisco Unified Communications Domain… CVSS 2.0HIGH 9.0
  • TI-2018-00323 Cross-site request forgery in Cisco Unified Communications Domain Manager unknown CVSS 3.0HIGH 8.8
  • TI-2014-02671 The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier… CVSS 2.0MEDIUM 6.8
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences