Cisco Call Manager vulnerabilities

18 CVEs affecting Cisco Call Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5468, published 2007-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2006-3109, published 2006-06-21. Medium severity, CVSS 4.3. EPSS: 13.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web…
CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2007-2832, published 2007-05-24. Medium severity, CVSS 4.3. EPSS: 6.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote…
CVE-2007-4634, published 2007-08-31. High severity, CVSS 9.3. EPSS: 4.3% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow…
CVE-2004-1760, published 2004-01-21. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain…
CVE-2006-0368, published 2006-01-22. High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days. Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a…
CVE-2005-2244, published 2005-07-12. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code…

Latest

CVE-2007-5468, published 2007-10-16. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication…
CVE-2007-4633, published 2007-08-31. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before…
CVE-2007-1467, published 2007-03-16. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace,…
CVE-2006-0367, published 2006-01-22. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative…
CVE-2005-2243, published 2005-07-12. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote…