CVSS: 7.5EPSS: 0%CPEs: 21EXPL: 0CVE-2015-0613
https://notcve.org/view.php?id=CVE-2015-0613
03 Apr 2015 — The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul20444. El proceso Connection Conversation Manager (también conocido como CuCsMgr) en Cisco Unity Connection 8.5 anterior a 8.5(1)SU7, 8.6 anterior a 8.6(2a)SU4, 9.x ant... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc • CWE-19: Data Processing Errors •
CVSS: 7.5EPSS: 0%CPEs: 21EXPL: 0CVE-2015-0614
https://notcve.org/view.php?id=CVE-2015-0614
03 Apr 2015 — The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul26267. El proceso Connection Conversation Manager (también conocido como CuCsMgr) en Cisco Unity Connection 8.5 anterior a 8.5(1)SU7, 8.6 anterior a 8.6(2a)SU4, 9.x ant... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc • CWE-19: Data Processing Errors •
CVSS: 7.5EPSS: 0%CPEs: 21EXPL: 0CVE-2015-0615
https://notcve.org/view.php?id=CVE-2015-0615
03 Apr 2015 — The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089. La implementación call-handling en Cisco Unity Connection 8.5 anterior a 8.5(1)SU7, 8.6 anterior a 8.6(2a)SU4, 9.x anterior a 9.1(2)SU2, y 10.0 anterior a 10.0(1)SU1, cuando la integra... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc • CWE-19: Data Processing Errors •
CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0CVE-2015-0616
https://notcve.org/view.php?id=CVE-2015-0616
03 Apr 2015 — The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections, aka Bug ID CSCul69819. El proceso Connection Conversation Manager (también conocido como CuCsMgr) en Cisco Unity Connection 8.5 anterior a 8.5(1)SU7, 8.6 anterior a 8.6(2a)SU4, y 9.x anterior a ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc • CWE-19: Data Processing Errors •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2014-7988
https://notcve.org/view.php?id=CVE-2014-7988
07 Nov 2014 — The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493. Unified Messaging Service (UMS) en Cisco Unity Connection 10.5 y anteriores permite a usuarios remotos autenticados obtener información sensible mediante la lectura de ficheros del registro, también conocido como Bug ID CSCur06493. • http://secunia.com/advisories/62106 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.0EPSS: 1%CPEs: 2EXPL: 0CVE-2014-3333
https://notcve.org/view.php?id=CVE-2014-3333
11 Aug 2014 — The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by conducting an "HTTP Intercept" attack and leveraging the ability to read files within the context of the web-server user account, aka Bug ID CSCup41014. El servidor en Cisco Unity Connection 9.1(1) y 9.1(2) permite a usuarios remotos autenticados obtener el acceso privilegiado mediante la realización de un ataque de 'intercepción de HTTP' y el aprovechamiento de la habilidad de leer ficher... • http://secunia.com/advisories/59768 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2014-3336
https://notcve.org/view.php?id=CVE-2014-3336
11 Aug 2014 — SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted request, aka Bug ID CSCuq31016. Vulnerabilidad de inyección SQL en el Framework web en Cisco Unity Connection 9.1(2) y anteriores permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de una solicitud manipulada, también conocido como Bug ID CSCuq31016. • http://secunia.com/advisories/59498 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2014-2145
https://notcve.org/view.php?id=CVE-2014-2145
05 Apr 2014 — Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files via vectors related to unenforced access constraints for .wav files and the audio/x-wav MIME type, aka Bug ID CSCun91071. Vulnerabilidad de salto de directorio en la API de mensajería en Cisco Unity Connection permite a usuarios remotos autenticados leer archivos arbitrarios a través de vectores relacionados con restricciones de acceso no reforzadas para archivos .wav y ... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2145 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 8EXPL: 0CVE-2014-2125
https://notcve.org/view.php?id=CVE-2014-2125
02 Apr 2014 — Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui33028. Vulnerabilidad de XSS en Web Inbox de Cisco Unity Connection 8.6(2a)SU3 y anteriores permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de un parámetro no especificado, también conocido como Bug ID CSCui33028. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2125 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 2%CPEs: 1EXPL: 0CVE-2014-0664
https://notcve.org/view.php?id=CVE-2014-0664
10 Jan 2014 — The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976. El servidor en Cisco Unity Connection permite a usuarios remotos autenticados causar una denegación de servicio (consumo de CPU) a través de comandos IMAP no especificados, tambien conocido como Bug ID CSCul49976. • http://osvdb.org/101915 • CWE-399: Resource Management Errors •