Cisco Presence Service Vulnerabilidad

Cronología

Versión

9.1(1)2
9.1(1) SU61
9.1(1) SU6a1
9.1(1) SU71
10.5(2) SU21

Contramedidas

Official Fix27
Temporary Fix0
Workaround1
Unavailable0
Not Defined4

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined32

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network32

Autenticación

Not Defined0
High0
Low17
None15

La interacción del usuario

Not Defined0
Required8
None24

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤30
≤40
≤58
≤612
≤76
≤84
≤91
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤58
≤615
≤73
≤84
≤91
≤101

VulDB

≤10
≤20
≤30
≤40
≤516
≤63
≤78
≤83
≤91
≤101

NVD

≤10
≤20
≤30
≤40
≤53
≤61
≤79
≤83
≤91
≤101

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤75
≤81
≤90
≤101

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k1
<10k18
<25k13
<50k0
<100k0
≥100k0

Explotar hoy

<1k24
<2k1
<5k2
<10k5
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (15): 9.1, 9.1(1), 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, 11.5(1)

Link to Product Website: https://www.cisco.com/

Tipo de software: Unified Communication Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-04-036.26.0Cisco IOS XE Web-based Interface directory traversal$5k-$25k$5k-$25kNot DefinedOfficial Fix0.02CVE-2024-20310
2024-01-249.99.8Cisco Packaged Contact Center Enterprise escalada de privilegios$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2024-20253
2023-06-287.57.3Cisco Unified Communications Manager IM & Presence Service XCP Authentication Service denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-20108
2022-07-075.55.4Cisco Unified Communications Manager Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20800
2022-07-077.27.1Cisco Unified Communications Manager Disaster Recovery Framework escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20859
2022-07-075.85.7Cisco Unified Communications Manager Database User Privilege divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20791
2022-04-225.95.7Cisco Unified Communications Manager IM & Presence Service Web-based Management Interface sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20786
2021-11-045.85.7Cisco Unified Communications Manager Web-based Management Interface cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34773
2021-11-044.34.2Cisco Unified Communications Manager Web-based Management Interface directory traversal$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34701
2021-05-066.36.0Cisco Unified Communications Manager & Presence Service Web-based Management Interface sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1365

22 no se muestran más entradas

más entradas por Cisco

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!