Unified Presence Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

UP

Product

Unified Presence Server

by Cisco · last CVE Jun 25, 2015

16

CVEs

0

On KEV

–

Max CVSS

0

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities16 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unified Presence Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-4220	–	2%	Jun 25	Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug… Affected: 9.1(1)
CVE-2014-3339	–	2%	Aug 12	Multiple SQL injection vulnerabilities in the administrative web interface in Cisco Unified Communications Manager (CM) and Cisco Unified Presence Server (CUPS) allow remote… Affected: All versions, or not specified
CVE-2014-3328	–	3%	Jul 26	The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125 Affected: All versions, or not specified
CVE-2013-6983	–	2%	Dec 31	SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID… Affected: All versions, or not specified
CVE-2013-1242	–	1%	May 10	Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to cause a denial of service (memory consumption) via malformed TCP packets,… Affected: All versions, or not specified
CVE-2013-1137	–	2%	Feb 27	Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port,… Affected: 8.6; 9.0; 9.1
CVE-2011-1643	–	2%	Aug 29	Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0,… Affected: 6.0(1); 6.0(2); 6.0(3); 6.0(4); 6.0(5); 6.0(6); +15 more
CVE-2010-2840	–	1%	Aug 26	The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP… Affected: 6.0; 6.0(2); 6.0(3); 6.0(4); 6.0(5); 6.0(6); +16 more
CVE-2010-2839	–	1%	Aug 26	SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption and process failure) via a… Affected: 6.0; 6.0(2); 6.0(3); 6.0(4); 6.0(5); 6.0(6); +16 more
CVE-2009-2874	–	4%	Oct 16	The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers to cause a denial of service (process crash) via a large… Affected: 1.0; 1.0(1); 1.0(2); 1.0(3); 6.0; 6.0(2); +6 more
CVE-2008-1158	–	2%	May 16	The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed… Affected: 1.0; 1.0(1); 1.0(2); 1.0(3)
CVE-2007-3776	–	1%	Jul 15	Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors… Affected: 1.0; 1.0(1); 1.0(2); 1.0(3)
CVE-2007-3775	–	2%	Jul 15	Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allows remote attackers to cause a denial of… Affected: 1.0; 1.0(1); 1.0(2); 1.0(3)
CVE-2007-1834	–	2%	Apr 3	Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow remote attackers to cause a denial of service (loss of… Affected: 1.0; 1.0(1); 1.0(2)
CVE-2007-1826	–	2%	Apr 2	Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allows… Affected: 1.0; 1.0(1); 1.0(2)
CVE-2006-5553	–	3%	Oct 26	Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote… Affected: 1.0; 1.0(2)