Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Cisco Unified Communications Manager n/a Clear all filters
TI-2019-11384 CVE-2019-15272 · GHSA-3jjm-f9rj-vgmh

Cisco Unified Communications Manager Security Bypass Vulnerability

Priority LOW 38

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to bypass secur…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01319 Published 2019-10-02 No fix listed CWE-264
TI-2019-09511 CVE-2019-12716 · GHSA-26jh-5x6v-w7cm

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01057 Published 2019-10-02 No fix listed CWE-79
TI-2019-09510 CVE-2019-12715 · GHSA-r628-742v-9v82

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

Priority LOW 29

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to conduct a cr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01057 Published 2019-10-02 No fix listed CWE-79
TI-2019-09506 CVE-2019-12711 · GHSA-8973-52qv-v8p9

Cisco Unified Communications Manager XML External Expansion Vulnerability

Priority LOW 31

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote attacker to access sensi…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01075 Published 2019-10-02 No fix listed CWE-611
TI-2019-09505 CVE-2019-12710 · GHSA-jqrp-5gxv-5jhg

Cisco Unified Communications Manager SQL Injection Vulnerability

Priority LOW 25

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an authenticated, remote attacker to impact the con…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01495 Published 2019-10-02 No fix listed CWE-89