Cisco Unified Communications Manager
28 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0267 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive | MEDIUM 6.5 | 0.4 % | ||
| CVE-2018-0266 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive | MEDIUM 4.3 | 1.7 % | ||
| CVE-2018-0198 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensiti | MEDIUM 5.3 | 1.7 % | ||
| CVE-2018-0206 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacke | MEDIUM 6.1 | 1.2 % | ||
| CVE-2018-0135 | Cisco Unified Communications Manager | A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an | MEDIUM 4.3 | 1.2 % | ||
| CVE-2018-0120 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL | MEDIUM 4.3 | 1.4 % | ||
| CVE-2018-0105 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensiti | MEDIUM 5.3 | 1.7 % | ||
| CVE-2018-0118 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacke | MEDIUM 6.1 | 1.7 % | ||
| CVE-2017-12357 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker | MEDIUM 5.4 | 0.9 % | ||
| CVE-2017-12302 | Cisco Unified Communications Manager | A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact t | MEDIUM 4.3 | 1.1 % | ||
| CVE-2017-12258 | Cisco Unified Communications Manager | A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cro | MEDIUM 6.1 | 1.7 % | ||
| CVE-2017-6791 | Cisco Unified Communications Manager | A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attac | HIGH 7.5 | 2.3 % | ||
| CVE-2017-6758 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker t | MEDIUM 6.5 | 3.8 % | ||
| CVE-2017-6757 | Cisco Unified Communications Manager | A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, | HIGH 8.8 | 1.6 % | ||
| CVE-2017-6654 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticat | MEDIUM 6.1 | 1.6 % | ||
| CVE-2017-3808 | Cisco Unified Communications Manager | A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) c | HIGH 7.5 | 2.5 % | ||
| CVE-2017-3888 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker | MEDIUM 5.4 | 1.2 % | ||
| CVE-2017-3886 | Cisco Unified Communications Manager | A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confid | MEDIUM 4.9 | 1.9 % | ||
| CVE-2017-3877 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker t | MEDIUM 6.5 | 0.8 % | ||
| CVE-2017-3874 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to | MEDIUM 5.4 | 0.9 % | ||
| CVE-2017-3872 | Cisco Unified Communications Manager | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could | MEDIUM 6.1 | 1.3 % | ||
| CVE-2017-3836 | Cisco Unified Communications Manager | A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive | MEDIUM 4.3 | 1.6 % | ||
| CVE-2017-3833 | Cisco Unified Communications Manager | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cr | MEDIUM 6.1 | 1.1 % | ||
| CVE-2017-3829 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot | MEDIUM 6.1 | 1.5 % | ||
| CVE-2017-3828 | Cisco Unified Communications Manager | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot | MEDIUM 6.1 | 1.5 % | ||
| CVE-2017-3821 | Cisco Unified Communications Manager | A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduc | MEDIUM 6.1 | 1.5 % | ||
| CVE-2017-3798 | Cisco Unified Communications Manager | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could | MEDIUM 6.1 | 1.1 % | ||
| CVE-2016-6464 | Cisco Unified Communications Manager | A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthent | HIGH 7.5 | 3.1 % |