Vulnslist

find the latest Cisco vulnerabilities

Cisco Unified Communications Products Vulnerabilities

cisco-sa-imp-trav-inj-dM687ZD6 · Medium · Published · Updated

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) and could allow an attacker to conduct SQL injection attacks on an affected system. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2021-1282, CVE-2021-1355, CVE-2021-1357, CVE-2021-1364
Cisco Bug IDsCSCvv20974, CSCvv62648, CSCvv20985, CSCvv62642
CVSS ScoreBase 6.5
Base 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Base 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, Cisco Unified Communications Manager / Cisco Unity Connection

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Unified Communications Manager known_affected cisco_csaf CVE-2021-1282 1
Cisco Unified Communications Manager / Cisco Unity Connection known_affected cisco_csaf CVE-2021-1282 1
Cisco Unified Communications Manager IM and Presence Service known_affected cisco_csaf CVE-2021-1355, CVE-2021-1357, CVE-2021-1364 3

Related Products

Product CVE Evidence
Cisco Unified Communications Manager CVE-2021-1355 Cisco OpenVuln
Cisco Unified Communications Manager / Cisco Unity Connection CVE-2021-1355 Cisco OpenVuln
Cisco Unified Communications Manager IM and Presence Service CVE-2021-1355 Cisco OpenVuln
Cisco Unity CVE-2021-1355 Cisco OpenVuln
Cisco Unity Connection CVE-2021-1355 Cisco OpenVuln
Cisco Unified Communications Manager CVE-2021-1357 Cisco OpenVuln
Cisco Unified Communications Manager / Cisco Unity Connection CVE-2021-1357 Cisco OpenVuln
Cisco Unified Communications Manager IM and Presence Service CVE-2021-1357 Cisco OpenVuln
Cisco Unity CVE-2021-1357 Cisco OpenVuln
Cisco Unity Connection CVE-2021-1357 Cisco OpenVuln
Cisco Unified Communications Manager CVE-2021-1282 Cisco OpenVuln
Cisco Unified Communications Manager CVE-2021-1364 Cisco OpenVuln
Cisco Unified Communications Manager / Cisco Unity Connection CVE-2021-1282 Cisco OpenVuln
Cisco Unified Communications Manager / Cisco Unity Connection CVE-2021-1364 Cisco OpenVuln
Cisco Unified Communications Manager IM and Presence Service CVE-2021-1282 Cisco OpenVuln
Cisco Unified Communications Manager IM and Presence Service CVE-2021-1364 Cisco OpenVuln
Cisco Unity CVE-2021-1282 Cisco OpenVuln
Cisco Unity CVE-2021-1364 Cisco OpenVuln
Cisco Unity Connection CVE-2021-1282 Cisco OpenVuln
Cisco Unity Connection CVE-2021-1364 Cisco OpenVuln