Unified Communications Domain Manager (Cisco) - vulnerabilities (CVEs)

41 CVEs, 0 in the last 30 days, 32 known versions, newest CVE from 2019-11-26. Vendor: Cisco.

CVEs of Unified Communications Domain Manager

CVE-2019-15968 - CVSS 5.4 (medium), 2019-11-26: A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote…
CVE-2018-0386 - CVSS 6.1 (medium), 2018-08-15: A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting…
CVE-2018-0364 - CVSS 8.8 (high), 2018-06-21: A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to…
CVE-2018-0124 - CVSS 9.8 (critical), 2018-02-22: A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated…
CVE-2017-12302 - CVSS 4.3 (medium), 2017-11-16: A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality…
CVE-2017-6668 - CVSS 4.9 (medium), 2017-06-13: Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the…
CVE-2017-6670 - CVSS 6.1 (medium), 2017-06-13: A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a…
CVE-2016-1354 - CVSS 6.1 (medium), 2016-03-03: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary…
CVE-2015-6422 - CVSS 4 (medium), 2015-12-14: The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service…
CVE-2015-6352 - CVSS 4.3 (medium), 2015-10-30: Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname…
CVE-2015-4196 - CVSS 5 (medium), 2015-07-04: Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote…
CVE-2015-4229 - CVSS 5 (medium), 2015-06-30: The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL,…
CVE-2015-0699 - CVSS 5 (medium), 2015-04-15: SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote…
CVE-2015-0684 - CVSS 6.5 (medium), 2015-04-03: SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to…
CVE-2015-0683 - CVSS 4 (medium), 2015-04-03: Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID…
CVE-2015-0682 - CVSS 6.5 (medium), 2015-04-03: Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID…
CVE-2015-0591 - CVSS 5 (medium), 2015-01-15: Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of…
CVE-2015-0588 - CVSS 6.8 (medium), 2015-01-15: Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication…
CVE-2014-8020 - CVSS 5 (medium), 2015-01-10: Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance…
CVE-2014-8018 - CVSS 4.3 (medium), 2014-12-22: Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified…
CVE-2014-8010 - CVSS 6.5 (medium), 2014-12-10: The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted…
CVE-2014-3339 - CVSS 6.5 (medium), 2014-08-12: Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server…
CVE-2014-3337 - CVSS 6.8 (medium), 2014-08-12: The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service…
CVE-2014-3320 - CVSS 5.8 (medium), 2014-07-18: Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and…
CVE-2014-3300 - CVSS 7.5 (high), 2014-07-07: The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly…
CVE-2014-2198 - CVSS 10 (critical), 2014-07-07: Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for…
CVE-2014-2197 - CVSS 9 (critical), 2014-07-07: The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not…
CVE-2014-3278 - CVSS 5 (medium), 2014-06-08: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to…
CVE-2014-3281 - CVSS 5 (medium), 2014-06-08: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to…
CVE-2014-3280 - CVSS 4 (medium), 2014-06-03: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows…
CVE-2014-3279 - CVSS 5 (medium), 2014-05-29: The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement…
CVE-2014-3277 - CVSS 4 (medium), 2014-05-29: The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement…
CVE-2014-3283 - CVSS 5.8 (medium), 2014-05-29: Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1)…
CVE-2014-3282 - CVSS 4 (medium), 2014-05-29: The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement…
CVE-2014-2104 - CVSS 4.3 (medium), 2014-03-02: Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1)…
CVE-2013-5517 - CVSS 5.5 (medium), 2013-10-02: SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL…
CVE-2013-3418 - CVSS 6.8 (medium), 2013-07-11: Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a…
CVE-2013-1132 - CVSS 4.3 (medium), 2013-07-10: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Communications Domain Manager allow remote attackers to inject arbitrary web script or…
CVE-2013-1230 - CVSS 5 (medium), 2013-05-01: Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets, aka…
CVE-2013-1227 - CVSS 4.3 (medium), 2013-04-29: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web…
CVE-2013-1113 - CVSS 4.3 (medium), 2013-01-31: Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a…