Cisco Unified Communications Manager SOAP API Endpoint code injection

A vulnerability was found in Cisco Unified Communications Manager, Unified Communications Manager Session Management Edition, Unified Communications Manager IM & Presence Service, Unity Connection and Prime License Manager (Unified Communication Software) and classified as critical. This issue affects an unknown code block of the component SOAP API Endpoint. Upgrading eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
11118217	04/08/2021	VulD...	price_0day	$5k-$25k	see documentation	04/08/2021	accepted	90
11118216	04/08/2021	VulD...	cvss3_meta_tempscore	8.8	see documentation	04/08/2021	accepted	90
11118215	04/08/2021	VulD...	cvss3_meta_basescore	8.8	see documentation	04/08/2021	accepted	90
11118214	04/08/2021	VulD...	cvss3_vuldb_tempscore	8.8		04/08/2021	accepted	90
11118213	04/08/2021	VulD...	cvss3_vuldb_basescore	8.8		04/08/2021	accepted	90
11118212	04/08/2021	VulD...	cvss2_vuldb_tempscore	9.0		04/08/2021	accepted	90
11118211	04/08/2021	VulD...	cvss2_vuldb_basescore	9.0		04/08/2021	accepted	90
11118210	04/08/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	04/08/2021	accepted	80
11118209	04/08/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	04/08/2021	accepted	80
11118208	04/08/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	04/08/2021	accepted	80
11118207	04/08/2021	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	04/08/2021	accepted	80
11118206	04/08/2021	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11118205	04/08/2021	VulD...	cvss2_vuldb_ai	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11118204	04/08/2021	VulD...	cvss2_vuldb_ii	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11118203	04/08/2021	VulD...	cvss2_vuldb_ci	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11118202	04/08/2021	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	04/08/2021	accepted	80
11118201	04/08/2021	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	04/08/2021	accepted	80
11118200	04/08/2021	VulD...	type	Unified Communication Software		04/08/2021	accepted	90
11118199	04/08/2021	VulD...	date	1617832800 (04/08/2021)		04/08/2021	accepted	90
11118198	04/08/2021	VulD...	cve	CVE-2021-1362	mitre.org	04/08/2021	accepted	90