UC
Product
Unified Communications Domain Manager
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 6Low 0
Watch
Add Unified Communications Domain Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0124 | 9.8 | Feb 22 | A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and… Affected: before 11.5\(2\) |
| CVE-2018-0364 | 8.8 | Jun 21 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: All versions, or not specified |
| CVE-2018-0386 | 6.1 | Aug 15 | A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an… Affected: All versions, or not specified |
| CVE-2017-6670 | 6.1 | Jun 13 | A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka… Affected: 8.1(7)er1 |
| CVE-2016-1354 | 6.1 | Mar 3 | Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.0; 8.0.1; 8.0.2 |
| CVE-2019-15968 | 5.4 | Nov 26 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a… Affected: All versions, or not specified |
| CVE-2017-6668 | 4.9 | Jun 13 | Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the… Affected: 8.1(7)er1 |
| CVE-2017-12302 | 4.3 | Nov 16 | A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by… Affected: 10.5(2.10000.5); 11.0(1.10000.10); 11.5(1.10000.6); 12.0(1.10000.10) |
| CVE-2015-6422 | – | Dec 14 | The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (subapplication outage)… Affected: 10.6.1 |
| CVE-2015-6352 | – | Oct 30 | Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exists, which allows… Affected: 10.6_base |
| CVE-2015-4196 | – | Jul 4 | Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain… Affected: 4.4.1; 4.4.2; 4.4.3; 4.4.4 |
| CVE-2015-4229 | – | Jun 30 | The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589 Affected: 8.1.4er1 |
| CVE-2015-0699 | – | Apr 15 | SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute… Affected: 10.5(1.98991.13) |
| CVE-2015-0684 | – | Apr 3 | SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary SQL… Affected: 8.1(.4) |
| CVE-2015-0683 | – | Apr 3 | Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744 Affected: 8.1(.4) |
| CVE-2015-0682 | – | Apr 3 | Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168 Affected: 8.1(.4) |
| CVE-2015-0591 | – | Jan 15 | Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of malformed TCP packets, aka… Affected: 10.0 |
| CVE-2015-0588 | – | Jan 15 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication of arbitrary users,… Affected: 10.0 |
| CVE-2014-8020 | – | Jan 10 | Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance degradation or service outage)… Affected: All versions, or not specified |
| CVE-2014-8018 | – | Dec 22 | Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8… Affected: 8.0 |
| CVE-2014-8010 | – | Dec 10 | The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID… Affected: 8.0 |
| CVE-2014-3339 | – | Aug 12 | Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote… Affected: All versions, or not specified |
| CVE-2014-3337 | – | Aug 12 | The SIP implementation in Cisco Unified Communications Manager (CM) 8.6(.2) and earlier allows remote authenticated users to cause a denial of service (process crash) via a… Affected: through 8.6\(.2\) |
| CVE-2014-3320 | – | Jul 18 | Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote… Affected: through 8.1\(.4\); 8.1; 8.1(.1); 8.1(.2); 8.1(.3) |
| CVE-2014-3300 | – | Jul 7 | The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access… Affected: All versions, or not specified |
| CVE-2014-2198 | – | Jul 7 | Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to… Affected: All versions, or not specified |
| CVE-2014-2197 | – | Jul 7 | The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement… Affected: All versions, or not specified |
| CVE-2014-3281 | – | Jun 8 | The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to obtain potentially… Affected: All versions, or not specified |
| CVE-2014-3278 | – | Jun 8 | The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts by… Affected: All versions, or not specified |
| CVE-2014-3280 | – | Jun 3 | The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated… Affected: through 9.0\(.1\); 7.4; 8.6; 8.6(.2); 9.0 |
| CVE-2014-3283 | – | May 29 | Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows… Affected: through 9.0\(.1\); 7.4; 8.6; 8.6(.2); 9.0 |
| CVE-2014-3282 | – | May 29 | The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which… Affected: through 9.0\(.1\); 7.4; 8.6; 8.6(.2); 9.0 |
| CVE-2014-3279 | – | May 29 | The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which… Affected: through 9.0\(.1\); 7.4; 8.6; 8.6(.2); 9.0 |
| CVE-2014-3277 | – | May 29 | The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which… Affected: through 9.0\(.1\); 7.4; 8.6; 8.6(.2); 9.0 |
| CVE-2014-2104 | – | Mar 2 | Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote… Affected: 9.0(.1) |
| CVE-2013-5517 | – | Oct 2 | SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted… Affected: All versions, or not specified |
| CVE-2013-3418 | – | Jul 11 | Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2013-1132 | – | Jul 10 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Communications Domain Manager allow remote attackers to inject arbitrary web script or HTML via vectors… Affected: All versions, or not specified |
| CVE-2013-1230 | – | May 1 | Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets, aka Bug ID CSCug47057 Affected: All versions, or not specified |
| CVE-2013-1227 | – | Apr 29 | Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via… Affected: All versions, or not specified |
| CVE-2013-1113 | – | Jan 31 | Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter… Affected: All versions, or not specified |
Showing 41