Cisco Unified Communications Domain Manager Luki w zabezpieczeniach

Oś czasu

Wersja

8.0	5
9.0	5
8.1	3
8.1(4)	3
8.1(7)ER1	2

Przeciwdziałanie

Official Fix	11
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	26

Wykorzystywanie

High	1
Functional	0
Proof-of-Concept	0
Unproven	4
Not Defined	32

Wektor dostępu

Not Defined	0
Physical	0
Local	1
Adjacent	0
Network	36

Uwierzytelnianie

Not Defined	0
High	0
Low	13
None	24

Interakcja z użytkownikiem

Not Defined	0
Required	8
None	29

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	9
≤6	13
≤7	12
≤8	2
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	11
≤6	14
≤7	11
≤8	0
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	9
≤6	14
≤7	11
≤8	3
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	4
≤8	1
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	2
<10k	14
<25k	19
<50k	2
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	12
<2k	2
<5k	13
<10k	10
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (32): 4.0, 4.1, 4.2, 4.3, 4.4, 8.0, 8.1, 8.1(1), 8.1(4), 8.1(4)ER1, 8.1(7)ER1, 8.2, 8.3, 8.4, 8.5, 8.6, 9.0, 10, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.6(1), 11.0, 11.1, 11.2, 11.3, 11.4, 11.5

Link to Product Website: https://www.cisco.com/

Typ oprogramowania: Unified Communication Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CVE
2019-11-26	5.0	5.0	Cisco Unified Communications Domain Manager Web-based Management Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2019-15968
2019-07-06	6.1	6.1	Cisco Unified Communications Domain Manager CLI Local Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	CVE-2019-1911
2018-08-15	5.7	5.7	Cisco Unified Communications Domain Manager cross site scripting	$5k-$25k	$5k-$25k	Not Defined	Not Defined	CVE-2018-0386
2018-06-21	7.0	7.0	Cisco Unified Communications Domain Manager Web-based Management Interface cross site request forgery	$5k-$25k	$5k-$25k	Not Defined	Not Defined	CVE-2018-0364
2018-02-22	8.5	8.2	Cisco Unified Communications Domain Manager Key Generation Remote Code Execution	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2018-0124
2017-06-13	6.2	6.2	Cisco Unified Communications Domain Manager Web-based GUI Redirect	$5k-$25k	$5k-$25k	Not Defined	Not Defined	CVE-2017-6670
2017-06-13	5.6	5.6	Cisco Unified Communications Domain Manager Web-based GUI sql injection	$5k-$25k	$5k-$25k	Not Defined	Not Defined	CVE-2017-6668
2016-03-28	6.1	6.1	Cisco Unified Communications Domain Manager cross site scripting	$5k-$25k	$5k-$25k	Not Defined	Not Defined	CVE-2016-1314
2016-03-03	6.1	5.8	Cisco Unified Communications Domain Manager cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	CVE-2016-1354
2015-12-14	4.3	4.3	Cisco Unified Communications Domain Manager Outage denial of service	$0-$5k	$0-$5k	Not Defined	Not Defined	CVE-2015-6422