Cisco Unified_communications_domain_manager
41 CVEs affecting Cisco Unified_communications_domain_manager. Latest disclosed: 2019-11-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0124 | Critical | 9.8 | 2018-02-22 | A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated pr… |
CVE-2018-0364 | High | 8.8 | 2018-06-21 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct… |
CVE-2018-0386 | Medium | 6.1 | 2018-08-15 | A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-6670 | Medium | 6.1 | 2017-06-13 | A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a mal… |
CVE-2016-1354 | Medium | 6.1 | 2016-03-03 | Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to inject arbitrary web… |
CVE-2019-15968 | Medium | 5.4 | 2019-11-26 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacke… |
CVE-2017-6668 | Medium | 4.9 | 2017-06-13 | Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confide… |
CVE-2017-12302 | Medium | 4.3 | 2017-11-16 | A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality… |
CVE-2015-6422 | | 2015-12-14 | The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (sub… | |
CVE-2015-6352 | | 2015-10-30 | Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on whether the pathname exi… | |
CVE-2015-4196 | | 2015-07-04 | Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote… | |
CVE-2015-4229 | | 2015-06-30 | The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, a… | |
CVE-2015-0699 | | 2015-04-15 | SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote atta… | |
CVE-2015-0684 | | 2015-04-03 | SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execut… | |
CVE-2015-0683 | | 2015-04-03 | Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CS… | |
CVE-2015-0682 | | 2015-04-03 | Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCu… | |
CVE-2015-0591 | | 2015-01-15 | Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of malforme… | |
CVE-2015-0588 | | 2015-01-15 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication o… | |
CVE-2014-8020 | | 2015-01-10 | Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance degradation… | |
CVE-2014-8018 | | 2014-12-22 | Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications… |