CVE-2011-1643: Cisco Unified Communications Manager

High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.

Affected products

• Cisco Unified Communications Manager: version 6.0 only; version 6.1(1) only; version 6.1(1a) only; version 6.1(1b) only; version 6.1(2) only; version 6.1(2)su1 only; …
• Cisco Unified Presence Server: version 6.0(1) only; version 6.0(2) only; version 6.0(3) only; version 6.0(4) only; version 6.0(5) only; version 6.0(6) only; …

Published 2011-08-29. Last modified 2026-06-16.