Cisco Unified Operations Manager vulnerabilities

11 CVEs affecting Cisco Unified Operations Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5488, published 2013-09-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0959, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 21.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to…
CVE-2009-1161, published 2009-05-21. High severity, CVSS 10.0. EPSS: 12.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager,…
CVE-2011-2738, published 2011-09-19. High severity, CVSS 10.0. EPSS: 11% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and…
CVE-2011-0962, published 2011-05-20. Medium severity, CVSS 4.3. EPSS: 6.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Device Center in Cisco Unified Operations Manager (CUOM) before 8.6 allows remote…
CVE-2010-3036, published 2010-10-29. High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days. Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on…
CVE-2011-0960, published 2011-05-20. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to…
CVE-2013-3439, published 2013-07-23. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka…
CVE-2013-5488, published 2013-09-12. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact…
CVE-2013-3440, published 2013-07-23. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain…
CVE-2013-3416, published 2013-07-10. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote…

Latest

CVE-2013-3437, published 2013-07-23. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID…