Unified IP Interactive Voice Response vulnerabilities

Product

Unified IP Interactive Voice Response

by Cisco · last CVE Sep 23, 2020

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 1High 2Medium 2Low 0

Severity

All severities8 Critical1 High2 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified IP Interactive Voice Response to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-0403	9.8	3%	Jul 18	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a… Affected: 11.5(1)
CVE-2018-0402	8.8	1%	Jul 18	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a… Affected: 11.5(1)
CVE-2019-1888	7.2	3%	Sep 23	A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files… Affected: 11.6(1); 11.6(2)
CVE-2018-0401	6.1	1%	Jul 18	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1)
CVE-2018-0400	6.1	1%	Jul 18	Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct… Affected: 11.5(1)
CVE-2011-3315	–	26%	Oct 27	Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified… Affected: All versions, or not specified
CVE-2010-1571	–	3%	Jun 10	Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before… Affected: 5.0; 6.0; 7.0
CVE-2010-1570	–	3%	Jun 10	The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before… Affected: 5.0; 6.0; 7.0