Cisco Unified IP Interactive Voice Response vulnerabilities

8 CVEs affecting Cisco Unified IP Interactive Voice Response, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1888, published 2020-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-3315, published 2011-10-27. High severity, CVSS 7.8. EPSS: 25.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express…
CVE-2019-1888, published 2020-09-23. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the Administration Web Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to upload arbitrary files and execute commands…
CVE-2010-1571, published 2010-06-10. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows…
CVE-2018-0403, published 2018-07-18. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password.…
CVE-2010-1570, published 2010-06-10. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote…
CVE-2018-0400, published 2018-07-18. Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting…
CVE-2018-0401, published 2018-07-18. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting…
CVE-2018-0402, published 2018-07-18. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request…