VendorsCiscounified_communications_manager12.5\(1.10000.22\)
Vulnerabilities

Cisco Unified Communications Manager 12.5\(1.10000.22\)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs
CVE-2019-15972
Cisco Unified Communications Manager SQL Injection Vulnerability
Published 2019-11-26 · Modified
8.8EPSS 0.016
CVE-2019-1887
Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
Published 2019-07-06 · Modified
8.6EPSS 0.018
CVE-2019-1837
Cisco Unified Communications Manager Denial of Service Vulnerability
Published 2019-04-18 · Modified
7.8EPSS 0.024
CVE-2020-3177
Cisco Unified Communications Manager Path Traversal Vulnerability
Published 2020-04-15 · Modified
7.5EPSS 0.028
CVE-2023-20116
A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the web UI of the Self Care Portal. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.
Published 2023-06-28 · Modified
6.8EPSS 0.006
CVE-2019-15272
Cisco Unified Communications Manager Security Bypass Vulnerability
Published 2019-10-02 · Modified
6.5EPSS 0.013
CVE-2019-12711
Cisco Unified Communications Manager XML External Expansion Vulnerability
Published 2019-10-02 · Modified
6.5EPSS 0.011
CVE-2019-1915
Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability
Published 2019-10-02 · Modified
6.5EPSS 0.007
CVE-2019-12707
Multiple Cisco Unified Communications Products Cross-Site Scripting Vulnerability
Published 2019-10-02 · Modified
6.1EPSS 0.011
CVE-2019-12715
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Published 2019-10-02 · Modified
6.1EPSS 0.011
CVE-2019-12716
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Published 2019-10-02 · Modified
6.1EPSS 0.011
CVE-2019-12710
Cisco Unified Communications Manager SQL Injection Vulnerability
Published 2019-10-02 · Modified
4.9EPSS 0.015