Cisco Im Luki w zabezpieczeniach

Oś czasu

Wersja

9.1(1)	2
9.1(1) SU6	1
9.1(1) SU6a	1
9.1(1) SU7	1
10.5(2) SU2	1

Przeciwdziałanie

Official Fix	26
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	8

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	35

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	35

Uwierzytelnianie

Not Defined	0
High	0
Low	15
None	20

Interakcja z użytkownikiem

Not Defined	0
Required	9
None	26

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	7
≤6	13
≤7	8
≤8	5
≤9	1
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	7
≤6	16
≤7	5
≤8	5
≤9	1
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	15
≤6	7
≤7	8
≤8	3
≤9	1
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	1
≤7	11
≤8	4
≤9	2
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	7
≤8	1
≤9	1
≤10	1

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	1
<10k	20
<25k	14
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	23
<2k	2
<5k	2
<10k	8
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (15): 9.1, 9.1(1), 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, 11.5(1)

Link to Product Website: https://www.cisco.com/

Typ oprogramowania: Unified Communication Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-04-03	6.2	6.0	Cisco IOS XE Web-based Interface directory traversal	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.08	CVE-2024-20310
2024-01-24	9.9	9.8	Cisco Packaged Contact Center Enterprise privilege escalation	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.04	CVE-2024-20253
2023-06-28	7.5	7.3	Cisco Unified Communications Manager IM & Presence Service XCP Authentication Service denial of service	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-20108
2022-07-07	5.5	5.4	Cisco Unified Communications Manager Web-based Management Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-20815
2022-07-07	5.5	5.4	Cisco Unified Communications Manager Web-based Management Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-20800
2022-07-07	7.2	7.1	Cisco Unified Communications Manager Disaster Recovery Framework privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-20859
2022-07-07	5.8	5.7	Cisco Unified Communications Manager Database User Privilege information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-20791
2022-04-22	5.9	5.7	Cisco Unified Communications Manager IM & Presence Service Web-based Management Interface sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-20786
2021-11-04	5.8	5.7	Cisco Unified Communications Manager Web-based Management Interface cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-34773
2021-11-04	4.3	4.2	Cisco Unified Communications Manager Web-based Management Interface directory traversal	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-34701

25 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 25 results.

więcej wpisów autorstwa Cisco

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!