Unified Callmanager vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

UC

Product

Unified Callmanager

by Cisco · last CVE Mar 28, 2015

18

CVEs

0

On KEV

–

Max CVSS

0

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities18 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified Callmanager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-0680	–	1%	Mar 28	Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified… Affected: 9.1(2.1000.28)
CVE-2009-2864	–	3%	Sep 28	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote… Affected: 5.0(1); 5.0(2); 5.0(2a); 5.0(3); 5.0(3a); 5.0(4); +21 more
CVE-2008-3801	–	3%	Sep 26	Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 4.1; 4.2; 4.3
CVE-2008-3800	–	4%	Sep 26	Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is… Affected: 4.1; 4.2; 4.3
CVE-2008-1744	–	1%	May 16	The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows… Affected: 4.1; 4.1_3_sr4; 4.1_3_sr5; 4.1_3_sr5b; 4.1_3_sr5c
CVE-2008-0026	–	2%	Feb 14	SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to… Affected: 5.0; 5.0(1); 5.0(2); 5.0(3); 5.0(3a); 5.0(4); +3 more
CVE-2008-0027	–	57%	Jan 17	Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3… Affected: 4.0; 4.1; 4.1(3)sr4; 4.1(3)sr5; 4.1(3)sr5b
CVE-2007-5537	–	2%	Oct 18	Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel… Affected: 5.0
CVE-2007-5538	–	6%	Oct 18	Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0,… Affected: 5.0
CVE-2006-5278	–	9%	Jul 15	Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711… Affected: 3.3 through 3.3\(5\)sr2; 4.1 through 4.1\(3\)sr4; 4.2 through 4.2\(3\)sr1; 5.1 through 5.1\(2\); 5.0
CVE-2006-5277	–	10%	Jul 15	Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow… Affected: 3.3 through 3.3\(5\)sr2; 4.1 through 4.1\(3\)sr4; 4.2 through 4.2\(3\)sr1; 5.0
CVE-2007-1833	–	2%	Apr 3	The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before… Affected: 3.3; 3.3(2); 3.3(2)spb; 3.3(2)spc; 3.3(3); 3.3(3)sr1; +19 more
CVE-2007-1834	–	2%	Apr 3	Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow remote attackers to cause a denial of service (loss of… Affected: 5.0; 5.0(1); 5.0(2); 5.0(3); 5.0(3a); 5.0(4)
CVE-2007-1826	–	2%	Apr 2	Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allows… Affected: 5.0; 5.0(1); 5.0(2); 5.0(3); 5.0(3a); 5.0(4)
CVE-2006-5553	–	3%	Oct 26	Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote… Affected: 5.0(1); 5.0(2); 5.0(3); 5.0(3a); 5.0(4)
CVE-2006-3592	–	1%	Jul 18	Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with… Affected: 5.0(1); 5.0(2); 5.0(3); 5.0(3a)
CVE-2006-3594	–	4%	Jul 18	Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug… Affected: 5.0(1); 5.0(2); 5.0(3); 5.0(3a)
CVE-2006-3593	–	1%	Jul 18	The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a… Affected: 5.0(1); 5.0(2); 5.0(3); 5.0(3a)