ER
Product
Emergency Responder
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 6Low 0
Watch
Add Emergency Responder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20101 | 9.8 | Oct 4 | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static… Affected: 12.5(1)su4 |
| CVE-2017-12337 | 9.8 | Nov 16 | A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified |
| CVE-2024-20352 | 8.8 | Apr 3 | A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform… Affected: before 12.5(1)su8b; 14; 14su1; 14su2; 14su3; 14su3a |
| CVE-2016-6468 | 8.8 | Dec 14 | A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: 11.5(1.10000.4) |
| CVE-2023-20259 | 7.5 | Oct 4 | A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could… Affected: 14su3 |
| CVE-2017-6779 | 7.5 | Jun 7 | Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 10.5 before 10.5\(1a\); 11.0 before 11.5\(4\); 12.0 before 12.0su1; 11.0(1.10000.10) |
| CVE-2023-20266 | 7.2 | Aug 30 | A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME),… Affected: 12.5.1su4; 12.5.1su8a; 14su3 |
| CVE-2024-20347 | 6.5 | Apr 3 | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions… Affected: before 12.5(1)su8b; 14; 14su1; 14su2; 14su3; 14su3a |
| CVE-2021-1226 | 6.5 | Jan 13 | A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified… Affected: 12.5\(1\) before 12.5\(1\)su3; 10.5(2); 11.5(1); 12.0(1) |
| CVE-2016-9208 | 6.5 | Dec 14 | A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote… Affected: 11.5(2.10000.5) |
| CVE-2018-15403 | 5.4 | Oct 5 | A vulnerability in the web interface of Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and Cisco… Affected: 11.5(4.59000.1); 12.0(1.40000.3); 12.5(0.98000.110) |
| CVE-2017-12227 | 5.4 | Sep 7 | A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack Affected: All versions, or not specified |
| CVE-2019-16025 | 4.8 | Sep 23 | A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… Affected: through 12.5_su1 |
| CVE-2015-6407 | – | Dec 13 | Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501 Affected: 10.5(3.10000.9) |
| CVE-2015-6406 | – | Dec 13 | Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted… Affected: 10.5(1.10000.5) |
| CVE-2015-6405 | – | Dec 13 | Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Affected: 10.5(1a) |
| CVE-2015-6400 | – | Dec 13 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka… Affected: 10.5(1a) |
| CVE-2014-2117 | – | Apr 4 | Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing… Affected: through 8.6 |
| CVE-2014-2116 | – | Apr 4 | Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882 Affected: through 8.6 |
| CVE-2014-2115 | – | Apr 4 | Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the… Affected: through 8.6 |
| CVE-2014-2114 | – | Apr 4 | Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an… Affected: through 8.6 |
| CVE-2012-1346 | – | Aug 6 | Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID… Affected: 8.6; 9.2 |
| CVE-2008-1154 | – | Apr 4 | The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and… Affected: 2.0 |
| CVE-2005-0356 | – | May 31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service… Affected: 1.1 |
| CVE-2004-1759 | – | Jan 21 | Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary… Affected: 1.1 |
| CVE-2004-1760 | – | Jan 21 | The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote… Affected: 1.1 |
Showing 26