CVSS: 7.8EPSS: 0%CPEs: 33EXPL: 0CVE-2012-3935
https://notcve.org/view.php?id=CVE-2012-3935
12 Sep 2012 — Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832. Cisco Unified Presence (CUP) antes de v8.6 (3) y Jabber Extensible Communications Platform (también conocido como Jabber XCP) antes de v5.3, permite a atacantes remotos provocar una denegación de servicio (caída del proceso) a través de una cabecera XMPP modificada, tam... • http://osvdb.org/85421 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2011-3288
https://notcve.org/view.php?id=CVE-2011-3288
06 Oct 2011 — Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564. Cisco Unified Presence antes de su versión v8.5(4) no detecta correctamente la recursividad durante la expansión de la entidad, lo que permite a atacante... • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml • CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') •
CVSS: 10.0EPSS: 1%CPEs: 69EXPL: 0CVE-2011-1643
https://notcve.org/view.php?id=CVE-2011-1643
29 Aug 2011 — Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833. Cisco Unified Communications Manager (también conocido como CUCM o formerly CallManager) v6.x, v7.x antes de v7.1(5b)su4, v8.0, y v8.5 antes de v... • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0CVE-2010-2839
https://notcve.org/view.php?id=CVE-2010-2839
26 Aug 2010 — SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption and process failure) via a malformed SIP message, aka Bug ID CSCtd14474. SIPD de Cisco Unified Presence v6.x anterior a v6.0(7) y v7.x anterior a v7.0(8) permite a atacantes remotos provocar una denegación de servicio (corrupción de la pila de memoria y fallo del proceso) mediante un mensaje SIP mal formado. También se conoce como Bug ID CSCtd14474. • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0CVE-2010-2840
https://notcve.org/view.php?id=CVE-2010-2840
26 Aug 2010 — The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629. El servicio Presence Engine (PE) en Cisco Unified Presence v6.x anterior a v6.0(7) y v7.x anterior a v7.0(8), no maneja apropiadamente un campo "Contact" erróneo en la cabecera de un mensaje SIP... • http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml • CWE-20: Improper Input Validation •