Known vulnerabilities in Cisco Unified Communications Manager IM & Presence Service - page 2

Vendor: Cisco Systems, Inc
Software: Cisco Unified Communications Manager IM & Presence Service
Software CPE: cpe:2.3:a:cisco_systems:cisco_unified_communications_manager_im_presence_service:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Unified Communications Manager IM & Presence Service Cisco Unified Communications Manager IM & Presence Service is affected by 27 known vulnerabilities: 1 critical, 2 high, 8 medium, 16 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49966 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-1364		 CWE-89 Low
No
No
 11.5.1 SU9, 12.5.1 SU4 25.01.2021 SB2021012513
#VU49596 - Information Exposure Through Log Files
CVE-2021-1226		 CWE-532 Low
No
No
 11.5.1 SU9, 12.5.1 SU3 13.01.2021 SB2021011902
#VU48152 - Uncaught Exception
CVE-2020-27121		 CWE-248 Low
No
No
 12.5.1.13900.18, 12.5.1.13900.19, 12.5.1.14000.50, 14.0.0.95200.4, 14.0.0.98000.868 05.11.2020 SB2020110533
#VU34095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3532		 CWE-79 Low
No
No
 - 06.08.2020 SB2020080612
#VU29459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3282		 CWE-79 Low
No
No
 10.5.2 SU10, 11.5.1 SU8 02.07.2020 SB2020070207
#VU14431 - Improper input validation
CVE-2018-0409		 CWE-126 Low
No
No
 11.5.1.14900.15, 11.5.1.14900.32, 12.0.1.21000.3, 12.5.0.98000.355 15.08.2018 SB2018081611
SB2018081612
#VU13951 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0396		 CWE-79 Low
No
No
 - 18.07.2018 SB2018072016


Showing elements 21 - 40 out of 27