Cisco IP Communicator vulnerabilities

4 CVEs affecting Cisco IP Communicator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4240, published 2015-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-4240, published 2015-07-08. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug ID CSCuu37656.
CVE-2007-1467, published 2007-03-16. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace,…
CVE-2012-0361, published 2012-05-02. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to…
CVE-2012-2490, published 2012-08-06. Medium severity, CVSS 5.0. EPSS: 0.5% chance of exploitation in the next 30 days. Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471.