Known vulnerabilities in Cisco Unified Communications Manager - page 2

Vendor: Cisco Systems, Inc
Software: Cisco Unified Communications Manager
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_communications_manager:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unified Communications Manager Cisco Unified Communications Manager is affected by 31 known vulnerabilities: 3 critical, 2 high, 8 medium, 18 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64956 - Information Exposure Through Timing Discrepancy
CVE-2022-20752		 CWE-208 Low
No
No
 12.5(1)SU6, 14SU1 06.07.2022 SB2022070620
#VU64955 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20862		 CWE-22 Medium
No
No
 12.5(1)SU6, 14SU2 06.07.2022 SB2022070621
#VU64954 - Improper Access Control
CVE-2022-20859		 CWE-284 Medium
No
No
 14SU2 06.07.2022 SB2022070621
#VU64953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20800		 CWE-79 Low
No
No
 12.5(1)SU5, 14SU2 06.07.2022 SB2022070621
#VU62477 - External Control of File Name or Path
CVE-2022-20789		 CWE-73 Low
No
No
 12.5(1)SU5, 14SU1 21.04.2022 SB2022042130
#VU62476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-20788		 CWE-79 Low
No
No
 11.5(1)SU11, 12.5(1)SU6, 14SU1 21.04.2022 SB2022042133
#VU62474 - Cross-Site Request Forgery (CSRF)
CVE-2022-20787		 CWE-352 Low
No
No
 12.5(1)SU6, 14SU1 21.04.2022 SB2022042134
#VU62473 - Improper Check for Unusual or Exceptional Conditions
CVE-2022-20804		 CWE-754 Low
No
No
 14SU1 21.04.2022 SB2022042132
#VU62465 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20790		 CWE-22 Medium
No
No
 14SU1 21.04.2022 SB2022042111
#VU57948 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-34701		 CWE-22 Low
No
No
 CCM.014.000(000.96541.002), CCM.014.000(001.11900.054), CCM.014.000(001.11900.128), CCM.014.000(001.11900.132), CCM.014.000(001.99900.003), CUC.014.000(001.11900.046), CUP.012.005(001.14900.003), CUP.014.000(000.95624.003), CUP.014.000(001.11000.086), CUP.014.000(001.99900.001), UCMAP.014.000(001.11900.035) 04.11.2021 SB2021110406
#VU57947 - Cross-Site Request Forgery (CSRF)
CVE-2021-34773		 CWE-352 Low
No
No
 - 04.11.2021 SB2021110405


Showing elements 21 - 40 out of 31