CVSS: 4.0EPSS: 0%CPEs: 113EXPL: 0CVE-2014-0657
https://notcve.org/view.php?id=CVE-2014-0657
The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540. El portal de administración en Cisco Unified Communications Manager (Unified CM) 9.1 (1) y anteriores no maneja apropiadamente las restricciones por rol, lo que permite a usuarios remotos autenticados sortear el control de acceso basado en rol a través de múltiples visitas a la URL "forbidden portal", tambien conocido como Bug ID CSCuj83540. • http://osvdb.org/101800 http://secunia.com/advisories/56368 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0657 http://tools.cisco.com/security/center/viewAlert.x?alertId=32341 http://www.securityfocus.com/bid/64690 http://www.securitytracker.com/id/1029571 https://exchange.xforce.ibmcloud.com/vulnerabilities/90120 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.0EPSS: 0%CPEs: 113EXPL: 0CVE-2013-6978
https://notcve.org/view.php?id=CVE-2013-6978
The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249. El componente disaster recovery system (DRS) en CIsco Unified Communications Manager (UCM) 9.1 (1) y anteriores permite usuarios remotos autenticados obtener información sensible dle dispositivo leyendo "extraneous information" en el código fuente HTML, tambien conocido como Bug ID CSCuj39249. • http://osvdb.org/101162 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978 http://tools.cisco.com/security/center/viewAlert.x?alertId=32219 http://www.securityfocus.com/bid/64421 http://www.securitytracker.com/id/1029520 https://exchange.xforce.ibmcloud.com/vulnerabilities/89834 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.9EPSS: 0%CPEs: 113EXPL: 0CVE-2013-6689
https://notcve.org/view.php?id=CVE-2013-6689
Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbitrary files, via an "overload" of the command-line utility, aka Bug ID CSCui58229. Cisco Unified Communications Manager (Unified CM) 9.1 (1) y anteriores permite a usuarios locales eludir los permisos de archivos, y leer, modificar o crear ficheros arbitrariamente, a través de una "sobrecarga" de la utilidad de línea de comandos, también conocido como Bug ID CSCui58229. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6689 http://tools.cisco.com/security/center/viewAlert.x?alertId=31758 • CWE-20: Improper Input Validation •
CVSS: 6.3EPSS: 0%CPEs: 113EXPL: 0CVE-2013-6688
https://notcve.org/view.php?id=CVE-2013-6688
Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communications Manager 9.1(1) and earlier allows remote authenticated users to create arbitrary files via a crafted path, aka Bug ID CSCui58222. Vulnerabilidad de salto de directorio en la interfaz license-upload del componente Enterprise License Manager (ELM) de Cisco Unified Communications Manager 9.1(1) y anteriores permite a usuarios remotos autenticados crear archivos arbitrarios a través de rutas diseñadas, también conocido como Bug ID CSCui58222. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6688 http://tools.cisco.com/security/center/viewAlert.x?alertId=31759 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 8.5EPSS: 1%CPEs: 40EXPL: 0CVE-2013-3462
https://notcve.org/view.php?id=CVE-2013-3462
Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358. Desbordamiento de búfer en Cisco Unified Communications Manager (Unified CM) v7.1(x) anterior a v7.1(5b)su6, v8.5(x) anterior a v8.5(1)su6, v8.6(x) anterior a v8.6(2a)su3, y v9.x anterior a v9.1(2) permite a los usuarios remotos autenticados ejecutar código arbitrario a través de vectores no especificados, también conocido como Bug ID CSCud54358. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm http://www.securitytracker.com/id/1028938 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •