GCVE - cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*

part: h version: 3.3 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Call Manager (`9999a58d-5e0f-5fcc-81e0-546f89cf4af9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2832`	vulnerable	2026-06-08 04:49:46.231891	Details available Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors. Published: 2007-05-24T01:29:00.000Z Updated: 2024-08-07T13:49:57.583Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1018105 http://www.vupen.com/english/advisories/2007/1922 http://www.osvdb.org/35337 http://www.cisco.com/en/US/products/products_security_response09186a0080849272.html http://marc.info/?l=full-disclosure&m=117993122727006&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3109`	vulnerable	2026-06-08 04:49:08.333858	Details available Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657. Published: 2006-06-21T01:00:00.000Z Updated: 2024-08-07T18:16:05.751Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1114 http://www.osvdb.org/26651 http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+CallManager+XSS+Advisory.htm http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_security_response09186a00806c0846.html http://www.securityfocus.com/bid/18504	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0368`	vulnerable	2026-06-08 04:48:53.629532	Details available Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727. Published: 2006-01-22T20:00:00.000Z Updated: 2024-08-07T16:34:14.807Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015503 http://www.vupen.com/english/advisories/2006/0249 http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/24180 http://www.securityfocus.com/bid/16295	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0367`	vulnerable	2026-06-08 04:48:53.622564	Details available Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page." Published: 2006-01-22T20:00:00.000Z Updated: 2024-08-07T16:34:13.895Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18501 http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml http://www.securityfocus.com/bid/16293 https://exchange.xforce.ibmcloud.com/vulnerabilities/24172 http://securitytracker.com/id?1015502	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2244`	vulnerable	2026-06-08 04:48:28.704495	Details available The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow. Published: 2005-07-12T04:00:00.000Z Updated: 2024-08-07T22:22:47.673Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/19053 http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml http://www.securityfocus.com/bid/14255	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2243`	vulnerable	2026-06-08 04:48:28.704146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2242`	not_vulnerable	2026-06-08 04:48:28.703819	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2241`	vulnerable	2026-06-08 04:48:28.702269	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0356`	vulnerable	2026-06-08 04:48:12.358773	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1760`	vulnerable	2026-06-08 04:48:07.522393	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1759`	vulnerable	2026-06-08 04:48:07.512483	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.