Socialminer vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SO

Product

Socialminer

by Cisco · last CVE Jun 4, 2025

13

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 1High 2Medium 6Low 0

Severity

All severities13 Critical1 High2 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Socialminer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-12337	9.8	6%	Nov 16	A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote… Affected: All versions, or not specified
CVE-2017-12216	8.8	3%	Sep 7	A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the… Affected: All versions, or not specified
CVE-2017-6779	7.5	2%	Jun 7	Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.6 before 11.6.1
CVE-2025-20278	6.7	0%	Jun 4	A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: 10.5(1); 10.6(1); 10.6(2); 11.0(1); 11.5(1); 11.5(1)su1; +11 more
CVE-2019-1668	6.1	1%	Jan 24	Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability Affected: 11.6(1); 11.6(2); 12.0(1)
CVE-2018-15435	6.1	1%	Oct 17	A vulnerability in the web-based management interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack… Affected: 11.6(1)
CVE-2017-6702	6.1	1%	Jul 4	A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web… Affected: 11.5(1)
CVE-2025-20129	5.4	0%	Jun 4	A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to… Affected: 10.5(1); 10.6(1); 10.6(2); 11.0(1); 11.5(1); 11.5(1)su1; +11 more
CVE-2018-0290	5.3	2%	May 17	A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system Affected: 11.6(1)
CVE-2015-6356	–	1%	Nov 4	Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,… Affected: 10.0(1)
CVE-2013-5492	–	1%	Sep 13	administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780 Affected: All versions, or not specified
CVE-2013-5489	–	1%	Sep 13	The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1)… Affected: All versions, or not specified
CVE-2013-5483	–	2%	Sep 8	Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID… Affected: All versions, or not specified