Cisco Business Edition 3000 vulnerabilities

2 CVEs affecting Cisco Business Edition 3000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4487, published 2012-03-01.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-4486, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before…
• CVE-2011-4487, published 2012-03-01. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business…