UC
Product
Unity Connection
On CISA KEVExploited in the wild
64
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 30Low 0
Watch
Add Unity Connection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0613 | – | Apr 3 | The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1,… Affected: 8.5(1); 8.5(1)su1; 8.5(1)su2; 8.5(1)su3; 8.5(1)su4; 8.5(1)su5; +15 more |
| CVE-2015-0612 | – | Apr 3 | The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk… Affected: 8.5(1); 8.5(1)su1; 8.5(1)su2; 8.5(1)su3; 8.5(1)su4; 8.5(1)su5; +10 more |
| CVE-2014-7988 | – | Nov 7 | The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID… Affected: through 10.5 |
| CVE-2014-3336 | – | Aug 11 | SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted… Affected: 9.1(1); 9.1(2) |
| CVE-2014-3333 | – | Aug 11 | The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the… Affected: 9.1(1); 9.1(2) |
| CVE-2014-2145 | – | Apr 5 | Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access… Affected: All versions, or not specified |
| CVE-2014-2125 | – | Apr 2 | Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an… Affected: through 8.6; 8.6; 8.6; 8.6; 8.6; 8.6; +2 more |
| CVE-2014-0664 | – | Jan 10 | The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976 Affected: All versions, or not specified |
| CVE-2013-5534 | – | Oct 19 | Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity Web Service) in Cisco Unity Connection allows remote… Affected: All versions, or not specified |
| CVE-2013-1129 | – | Feb 19 | Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service (memory consumption and process crash) by sending many TCP requests, aka Bug ID… Affected: 9.0; 9.1; 9.1.1; 9.5 |
| CVE-2012-3096 | – | Sep 16 | Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of… Affected: 7.1; 8.0; 8.5 |
| CVE-2012-3060 | – | Sep 16 | Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269 Affected: 8.6; 9.0; 9.5 |
| CVE-2012-0367 | – | Mar 1 | Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series… Affected: through 7.1\(5b\)su4; 1.1; 1.1(1); 1.1(1)_es1; 1.1(1)_es12; 1.1(1)_sr1; +34 more |
| CVE-2012-0366 | – | Mar 1 | Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID… Affected: through 7.1\(3b\)su1; 1.1; 1.1(1); 1.1(1)_es1; 1.1(1)_es12; 1.1(1)_sr1; +34 more |