Cisco Unified Communications Domain Manager vulnerabilities
25 known vulnerabilities affecting cisco/unified_communications_domain_manager.
Total CVEs
25
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM24
Vulnerabilities
Page 2 of 2
CVE-2014-3277P4MEDIUMCVSS 4.0≤ 9.0\(.1\)v7.4+3 more2014-05-29
CVE-2014-3277 [MEDIUM] CWE-287 CVE-2014-3277: The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum77005
nvd
CVE-2014-3280P4MEDIUMCVSS 4.0≤ 9.0\(.1\)v7.4+3 more2014-06-03
CVE-2014-3280 [MEDIUM] CWE-264 CVE-2014-3280: The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier d
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116.
nvd
CVE-2014-2104P4MEDIUMCVSS 4.3v9.0\(.1\)2014-03-02
CVE-2014-2104 [MEDIUM] CWE-79 CVE-2014-2104: Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) pa
Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and CSCum63113.
nvd
CVE-2015-6422P4MEDIUMCVSS 4.0v10.6.12015-12-14
CVE-2015-6422 [MEDIUM] CWE-399 CVE-2015-6422: The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows r
The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (subapplication outage) via malformed requests, aka Bug ID CSCuu10981.
nvd
CVE-2015-0683P4MEDIUMCVSS 4.0v8.1\(.4\)2015-04-03
CVE-2015-0683 [MEDIUM] CWE-200 CVE-2015-0683: Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensi
Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744.
nvd
← Previous2 / 2