Cisco Unified Communications Manager Im Vulnerabilità

Sequenza temporale

Versione

9.1(1)2
9.1(1) SU61
9.1(1) SU6a1
9.1(1) SU71
10.5(2) SU21

Contromisure

Official Fix25
Temporary Fix0
Workaround1
Unavailable0
Not Defined5

Sfruttabilità

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined31

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent0
Network31

Autenticazione

Not Defined0
High0
Low14
None17

Interazione dell'utente

Not Defined0
Required8
None23

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤40
≤56
≤612
≤76
≤85
≤91
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤56
≤615
≤73
≤85
≤91
≤101

VulDB

≤10
≤20
≤30
≤40
≤514
≤65
≤77
≤83
≤91
≤101

NVD

≤10
≤20
≤30
≤40
≤52
≤61
≤710
≤83
≤92
≤101

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤77
≤81
≤91
≤101

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k0
<5k1
<10k16
<25k14
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k24
<2k0
<5k1
<10k5
<25k1
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (9): 9.1, 9.1(1), 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, 11.5(1)

Link to Product Website: https://www.cisco.com/

Tipo di software: Unified Communication Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
03/04/20246.26.0Cisco IOS XE Web-based Interface directory traversal$5k-$25k$5k-$25kNot DefinedOfficial Fix0.02CVE-2024-20310
24/01/20249.99.8Cisco Packaged Contact Center Enterprise escalazione di privilegi$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2024-20253
28/06/20237.57.3Cisco Unified Communications Manager IM & Presence Service XCP Authentication Service denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-20108
07/07/20225.55.4Cisco Unified Communications Manager Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20815
07/07/20225.55.4Cisco Unified Communications Manager Web-based Management Interface cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20800
07/07/20227.27.1Cisco Unified Communications Manager Disaster Recovery Framework escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20859
07/07/20225.85.7Cisco Unified Communications Manager Database User Privilege rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20791
22/04/20225.95.7Cisco Unified Communications Manager IM & Presence Service Web-based Management Interface sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-20786
04/11/20215.85.7Cisco Unified Communications Manager Web-based Management Interface cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34773
04/11/20214.34.2Cisco Unified Communications Manager Web-based Management Interface directory traversal$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34701

21 non vengono visualizzate più voci

altre voci di Cisco

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!