Known vulnerabilities in Unified Communications Manager (CallManager)

Vendor: Cisco Systems, Inc
Software: Unified Communications Manager (CallManager)
Software CPE: cpe:2.3:a:cisco_systems:unified_communications_manager_callmanager:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 48
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Unified Communications Manager (CallManager) Unified Communications Manager (CallManager) is affected by 48 known vulnerabilities: 1 high, 5 medium, 42 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52933 - Improper Access Control
CVE-2021-1478		 CWE-284 Medium
No
No
 12.6 06.05.2021 SB2021050624
#VU51972 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1409		 CWE-79 Low
No
No
 14.0.1.11000.1 08.04.2021 SB2021040801
#VU51971 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1408		 CWE-79 Low
No
No
 14.0.1.11000.1 08.04.2021 SB2021040801
#VU51970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1407		 CWE-79 Low
No
No
 14.0.1.11000.1 08.04.2021 SB2021040801
#VU51969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1380		 CWE-79 Low
No
No
 14.0.1.11000.1 08.04.2021 SB2021040801
#VU51967 - Improper Access Control
CVE-2021-1399		 CWE-284 Low
No
No
 12.5.1 SU4 07.04.2021 SB2021040725
#VU51966 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-1362		 CWE-94 Medium
No
No
 11.5.1 SU9, 12.5.1 SU4 07.04.2021 SB2021040722
#VU51965 - File And Directory Information Exposure
CVE-2021-1406		 CWE-538 Low
No
No
 12.5.1.15000.23, 12.5.1.32124.2, 14.0.1.11000.1 07.04.2021 SB2021040721
#VU49963 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-1282		 CWE-89 Low
No
No
 11.5.1 SU9, 12.0.1 SU4, 12.5.1 SU4 20.01.2021 SB2021012513
#VU49596 - Information Exposure Through Log Files
CVE-2021-1226		 CWE-532 Low
No
No
 11.5.1 SU9, 12.0.1 SU4, 12.5.1 SU3 13.01.2021 SB2021011902
#VU34095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3532		 CWE-79 Low
No
No
 - 06.08.2020 SB2020080612
#VU34094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3346		 CWE-79 Low
No
No
 - 06.08.2020 SB2020080612
#VU29459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3282		 CWE-79 Low
No
No
 10.5.2 SU10, 11.5.1 SU8 02.07.2020 SB2020070207
#VU29454 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-3420		 CWE-79 Low
No
No
 - 02.07.2020 SB2020070206
#VU29143 - Exposure of sensitive information to an unauthorized actor
CVE-2020-3360		 CWE-200 Medium
No
No
 - 18.06.2020 SB2020061814
#VU26981 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-3177		 CWE-22 Medium
No
No
 10.5.2 SU9, 11.5.1 SU7, 12.5.1 SU2 16.04.2020 SB2020041611
#VU25029 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-15972		 CWE-89 Medium
Available
No
 11.5.1 SU7, 12.5.1 SU2 07.02.2020 SB2019112019
#VU24529 - Cross-Site Request Forgery (CSRF)
CVE-2020-3135		 CWE-352 Low
No
No
 11.5.1 24.01.2020 SB2020012419
#VU24527 - Exposure of sensitive information to an unauthorized actor
CVE-2019-15963		 CWE-200 Low
No
No
 11.5.1.1 .SU7 24.01.2020 SB2020012417
#VU16931 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0474		 CWE-200 Low
No
No
 12.0.0.98000.239, 12.0.0.98000.240, 12.0.0.98000.535, 12.0.0.98000.692, 12.0.1.10000.10 09.01.2019 SB2019011013


Showing elements 1 - 20 out of 48