Skip to content

Cisco Unity vulnerabilities

cisco unity connectionCisco Unity Connection File Upload Denial of Service VulnerabilityCVE-2018-153966.8 MediumOctober 5, 2018
cisco unity connectionA vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated,...CVE-2018-03546.1 MediumJune 7, 2018
cisco emergency responder, finesse, hosted collaboration mediation fulfillment +10 more +12 moreMultiple Cisco products are affected by a vulnerability in local file management for certain...CVE-2017-67797.5 HighJune 7, 2018
cisco unity connectionA vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated,...CVE-2018-02035.3 MediumFebruary 22, 2018
cisco emergency responder, finesse, hosted collaboration solution +8 more +10 moreA vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice...CVE-2017-123379.8 CriticalNovember 16, 2017
cisco unity connectionA vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated,...CVE-2017-122126.1 MediumSeptember 7, 2017
cisco unity connectionA vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an...CVE-2017-66295.3 MediumMay 3, 2017
cisco unity connectionCross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote...CVE-2016-13776.1 MediumApril 12, 2016
cisco unity connectionCross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote...CVE-2016-13046.1 MediumJanuary 30, 2016
cisco unity connectionCross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows...CVE-2016-13006.1 MediumJanuary 27, 2016
cisco libsrtp, adaptive security appliance software, dx series ip phones firmware +11 more +13 moreThe encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause...CVE-2015-6360Fix available7.5 HighJanuary 17, 2016
cisco unity connectionCross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows...CVE-2015-64086.8 MediumDecember 12, 2015
cisco unity connectionCross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9...CVE-2015-63904.3 MediumDecember 3, 2015
cisco unity connectionSQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier...CVE-2015-62996.5 MediumSeptember 20, 2015
cisco unity connectionCross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection...CVE-2015-07166.8 MediumMay 7, 2015
cisco unity connectionSQL injection vulnerability in the administrative web interface in Cisco Unified Communications...CVE-2015-07156.5 MediumMay 7, 2015
cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...CVE-2015-06167.1 HighApril 3, 2015
cisco unity connectionThe call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6...CVE-2015-06157.1 HighApril 3, 2015
cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...CVE-2015-06147.1 HighApril 3, 2015
cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...CVE-2015-06137.1 HighApril 3, 2015
cisco unity connection, unity connection 8.5, unity connection 8.6 +2 moreThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...CVE-2015-06127.1 HighApril 3, 2015
cisco unity connectionThe Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote...CVE-2014-79884.0 MediumNovember 7, 2014
cisco unity connectionSQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier...CVE-2014-33366.5 MediumAugust 11, 2014
cisco unity connectionThe server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to...CVE-2014-33339.0 HighAugust 11, 2014
cisco unity connectionDirectory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote...CVE-2014-21454.0 MediumApril 5, 2014
cisco unity connectionCross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3...CVE-2014-21254.3 MediumApril 2, 2014
cisco unity connectionThe server in Cisco Unity Connection allows remote authenticated users to cause a denial of...CVE-2014-06646.8 MediumJanuary 10, 2014
cisco unity connectionDirectory traversal vulnerability in the attachment service in the Voice Message Web Service (aka...CVE-2013-55344.0 MediumOctober 19, 2013
cisco unity connectionMemory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service ...CVE-2013-11295.0 MediumFebruary 19, 2013
cisco unity express softwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow...CVE-2013-1114Public exploitEPSS 10.3%4.3 MediumFebruary 13, 2013
cisco unity express, unity express software +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with...CVE-2013-1120Public exploit6.8 MediumFebruary 6, 2013
cisco unity connectionCisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial...CVE-2012-30964.0 MediumSeptember 16, 2012
cisco unity connectionCisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of...CVE-2012-30607.8 HighSeptember 16, 2012
cisco unity connectionCisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2...CVE-2012-03677.8 HighMarch 1, 2012
cisco unity connectionCisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the...CVE-2012-03669.0 HighMarch 1, 2012
cisco unityCisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak...CVE-2008-45454.0 MediumOctober 13, 2008
cisco unityUnspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly...CVE-2008-45445.0 MediumOctober 13, 2008
cisco unityCisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using...CVE-2008-45437.1 HighOctober 13, 2008
cisco unityCross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1...CVE-2008-45423.5 LowOctober 13, 2008
cisco unityUnspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x...CVE-2008-38145.8 MediumOctober 8, 2008
cisco unity express, unity express software +1 moreUnspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2)...CVE-2006-21662.1 LowMay 4, 2006
cisco ata, subscriber edge services manager, unity express +4 more +6 moreCisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services...CVE-2005-47945.0 MediumDecember 31, 2005
alaxala networks, cisco agent desktop, aironet ap1200 +73 more +75 moreMultiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the...CVE-2005-0356Public exploitEPSS 82.8%5.0 MediumMay 31, 2005
cisco unity serverCisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded...CVE-2004-13227.5 HighDecember 15, 2004
cisco 80-7111-01 for the unity-svrx255-1a, 80-7112-01 for the unity-svrx255-2a +1 moreCisco Unity on IBM servers is shipped with default settings that should have been disabled by the...CVE-2003-09837.5 HighDecember 11, 2003
cisco unity serverCisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers...CVE-2002-11907.5 HighOctober 15, 2002
cisco unity serverThe default configuration of Cisco Unity 2.x and 3.x does not block international operator calls...CVE-2002-11894.6 MediumOctober 11, 2002