Socialminer (Cisco) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2025-06-04. Vendor: Cisco.
CVEs of Socialminer
- CVE-2025-20278 - CVSS 6.7 (medium), 2025-06-04: A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the…
- CVE-2025-20129 - CVSS 5.4 (medium), 2025-06-04: A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated,…
- CVE-2019-1668 - CVSS 6.1 (medium), 2019-01-24: A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks…
- CVE-2018-15435 - CVSS 6.1 (medium), 2018-10-17: A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site…
- CVE-2017-6779 - CVSS 7.5 (high), 2018-06-07: Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow…
- CVE-2018-0290 - CVSS 5.3 (medium), 2018-05-17: A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the…
- CVE-2017-12337 - CVSS 9.8 (critical), 2017-11-16: A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an…
- CVE-2017-12216 - CVSS 8.8 (high), 2017-09-07: A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to…
- CVE-2017-6702 - CVSS 6.1 (medium), 2017-07-04: A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
- CVE-2015-6356 - CVSS 4.3 (medium), 2015-11-04: Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2013-5489 - CVSS 5 (medium), 2013-09-13: The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive…
- CVE-2013-5492 - CVSS 5 (medium), 2013-09-13: administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka…
- CVE-2013-5483 - CVSS 4.3 (medium), 2013-09-08: Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HTML via…
