Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:cisco_unified_communications_domain_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCisco Unified Communications Domain Manager (fbbf0acf-5321-595d-9042-af23f16ef607)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0124 vulnerable 2026-06-08 05:10:21.142474 Details available
A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application configuration. An attacker could exploit this vulnerability by using a known insecure key value to bypass security protections by sending arbitrary requests using the insecure key to a targeted application. An exploit could allow the attacker to execute arbitrary code. This vulnerability affects Cisco Unified Communications Domain Manager releases prior to 11.5(2). Cisco Bug IDs: CSCuv67964.
Published: 2018-02-22T00:00:00.000Z
Updated: 2024-12-02T21:07:56.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6670 vulnerable 2026-06-08 05:09:52.103302 Details available
A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.1(7)ER1.
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-05T15:33:20.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6668 vulnerable 2026-06-08 05:09:52.100491 Details available
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc52784 CSCvc97648. Known Affected Releases: 8.1(7)ER1.
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-05T15:33:20.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.