Priority LOW 37
A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an a…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01015 · Published 2021-05-06 · No fix listed CWE-284
Priority LOW 29
A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.005 · Published 2020-09-23 · No fix listed CWE-352
Priority LOW 25
A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to information that is stored o…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01194 · Published 2020-05-06 · No fix listed CWE-611
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.005 · Published 2018-10-05 · No fix listed CWE-352
Priority MEDIUM 43
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utiliz…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01984 · Published 2018-06-07 · No fix listed CWE-399
Priority LOW 29
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00496 · Published 2016-11-03 · No fix listed CWE-352
Priority MEDIUM 40
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSC…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04778 · Published 2016-09-12 · No fix listed CWE-22
Priority LOW 25
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in a…
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.02384 · Published 2016-09-12 · No fix listed CWE-22