Cisco Unified Presence vulnerabilities

8 CVEs affecting Cisco Unified Presence, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3453, published 2013-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1154, published 2008-04-04. High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days. The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency…
CVE-2012-3935, published 2012-09-12. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted…
CVE-2008-1158, published 2008-05-16. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID…
CVE-2008-1740, published 2008-05-16. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test,"…
CVE-2008-1741, published 2008-05-16. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID…
CVE-2013-3453, published 2013-08-22. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service…
CVE-2011-3288, published 2011-10-06. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process…
CVE-2013-1197, published 2013-04-16. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon crash) via crafted XML content in an XMPP message, aka Bug…