CM
Product
Call Manager
18
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Call Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: All versions, or not specified |
| CVE-2007-5468 | – | Oct 16 | Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest… Affected: 5.1.1.3000 |
| CVE-2007-4634 | – | Aug 31 | Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before… Affected: 3.3(5)sr1; 3.3(5)sr2; 3.3(5)sr2a; 4.1; 4.1(3)sr1; 4.1(3)sr2; +10 more |
| CVE-2007-4633 | – | Aug 31 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2,… Affected: 3.3(5)sr1; 3.3(5)sr2; 3.3(5)sr2a; 4.1; 4.1(3)sr1; 4.1(3)sr2; +11 more |
| CVE-2007-2832 | – | May 24 | Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before… Affected: 3.3; 3.3(3); 3.3(3)es61; 3.3(4)es25; 3.3(5); 3.3(5)es30; +13 more |
| CVE-2007-1467 | – | Mar 16 | Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal… Affected: All versions, or not specified |
| CVE-2006-3109 | – | Jun 21 | Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to… Affected: 3.3; 3.3(3); 3.3(3)es61; 3.3(4)es25; 3.3(5); 3.3(5)es30; +15 more |
| CVE-2006-0367 | – | Jan 22 | Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with… Affected: 1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +12 more |
| CVE-2006-0368 | – | Jan 22 | Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory… Affected: 1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +16 more |
| CVE-2005-2244 | – | Jul 12 | The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to… Affected: 3.2; 3.3; 4.0; 4.1 |
| CVE-2005-2241 | – | Jul 12 | Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data… Affected: 3.2; 3.3; 4.0; 4.1 |
| CVE-2005-2243 | – | Jul 12 | Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is… Affected: 3.2; 3.3; 4.0; 4.1 |
| CVE-2005-0356 | – | May 31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service… Affected: 1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +4 more |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: All versions, or not specified |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: All versions, or not specified |
| CVE-2004-1760 | – | Jan 21 | The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote… Affected: 1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +4 more |
| CVE-2004-1759 | – | Jan 21 | Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary… Affected: 1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +4 more |
| CVE-2002-0505 | – | Aug 12 | Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service… Affected: 3.0; 3.1 |
Showing 18